Privacy Policy

This Privacy Policy ("Policy") explains how HomeStove Technologies Private Limited, a company incorporated under the laws of India and having its registered office at Bangalore, Karnataka, India ("HomeStove," "we," "us," or "our"), collects, receives, stores, uses, processes, shares, transfers, retains, and otherwise handles personal data and related information when you access or use the HomeStove mobile application, website, chef dashboard, customer support channels, and any related products, features, content, or services (collectively, the "Platform").

This Policy applies to: customers, browsers, and visitors using the Platform to discover or order food; home chefs, home cooks, home kitchens, and kitchen operators who onboard or apply to onboard to the Platform; and any other individual who interacts with us in connection with the Platform.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

1.Information We Collect

2.Purposes of Processing

We use your information for the following purposes:

• Service Delivery: Creating and managing your account, processing orders, confirming bookings, delivering food, and fulfilling your requests
• Payment Processing: Processing transactions, managing refunds, billing, invoicing, and payment reconciliation
• Safety and Security: Detecting and preventing fraud, unauthorized access, abuse, and security incidents
• Customer Support: Responding to inquiries, resolving disputes, and providing assistance
• Verification and Compliance: KYC, identity verification, legal compliance, regulatory requirements, and license compliance
• Quality Improvement: Analyzing usage patterns, improving the Platform, developing new features, and optimizing user experience
• Marketing and Communication: Sending promotional messages, newsletters, offers, and service updates (only with consent)
• Analytics and Research: Understanding user behavior, market trends, and platform performance
• Personalization: Customizing your experience, recommendations, and content based on preferences
• Onboarding and Verification: For chefs/kitchen operators, verifying credentials, kitchen standards, and food safety compliance
• Rating and Review Management: Managing user reviews, ratings, and quality feedback
• Legal Obligations: Complying with applicable laws, regulations, court orders, and regulatory investigations

3.Legal Basis / Grounds of Processing

We process your personal data on the following legal bases:

• Contractual Necessity: To perform our obligations under our Terms of Service and agreements with you
• Consent: Where you have explicitly consented to processing, including for marketing communications and optional features
• Legal Obligation: To comply with applicable Indian laws, regulations, court orders, and regulatory requirements (e.g., FSSAI, GST, anti-money laundering)
• Legitimate Interests: To pursue our business interests, including fraud prevention, security, platform improvement, and customer support, balanced against your privacy rights
• Public Interest: To protect public health and food safety in accordance with applicable food safety laws
• Vital Interests: To protect your safety or the safety of others in emergency situations

4.Cookies and Similar Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to:

• Remember your preferences and login information
• Understand how you use the Platform
• Deliver personalized content and advertisements
• Measure campaign effectiveness
• Prevent fraud and enhance security
• Analyze platform performance

Types of Cookies:

• Essential Cookies: Required for basic functionality; cannot be disabled
• Performance Cookies: Collect data about how you use the Platform
• Functional Cookies: Enable personalized features and remember your preferences
• Marketing Cookies: Track you across websites for targeted advertising

Most browsers allow you to control cookies through settings. However, disabling certain cookies may affect Platform functionality. We also respect do-not-track signals where applicable.

5.Sharing of Information

We share your information with:

• Service Providers: Payment processors, delivery partners, analytics providers, cloud storage providers, and customer support platforms
• Chefs and Kitchen Operators: Order details, delivery address, and contact information necessary to fulfill orders
• Customers: Chef/kitchen operator information, ratings, and reviews as necessary for your decision-making
• Business Partners: Marketing partners, affiliate networks, and promotional partners (only with consent)
• Legal Authorities: Law enforcement, regulators, and government agencies as required by law or court orders
• Other Users: Your public profile, reviews, ratings, and comments may be visible to other Platform users
• Corporate Transactions: In case of merger, acquisition, bankruptcy, or asset sale, information may be transferred as part of the business transaction
• Consent-Based Sharing: We share information with third parties only when you explicitly consent

6.Cross-Border Transfers

Your information is primarily stored in India. However, we may transfer data internationally to:

• Service providers and cloud infrastructure providers located outside India
• Business partners and subsidiaries in other countries
• Payment processors and financial institutions that operate globally

Where we transfer data outside India, we implement appropriate safeguards, including Standard Contractual Clauses, privacy agreements, and compliance with applicable data transfer laws. By using the Platform, you consent to such transfers, subject to applicable protections.

7.Data Retention

We retain your information for the following periods:

• Account Information: For the duration of your account and 2 years after deletion or account closure
• Transaction Data: For at least 7 years for tax, accounting, and legal compliance
• Customer Support Records: For 3 years or as required by law
• Marketing Data: Until you unsubscribe or as permitted by law
• Identity Verification Data: For 5 years after the transaction or relationship end, as required by KYC regulations
• Audit and Compliance Data: As required by applicable Indian laws and regulations
• Legal and Litigation Data: For the duration of any legal proceeding and applicable statutory limitations

After the retention period, we securely delete or anonymize your information, except where longer retention is required by law.

8.Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for data in transit
• AES-256 encryption for data at rest
• Secure authentication mechanisms including two-factor authentication
• Regular security audits and penetration testing
• Access controls limiting employee access to personal data
• Data anonymization and pseudonymization where possible
• Backup and disaster recovery procedures
• Incident response and breach notification protocols

While we strive to protect your information, no security system is completely impenetrable. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your password and account information.

9.Your Rights and Choices

Depending on your location and applicable laws, you have the following rights:

• Right to Access: Request and obtain a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your data, subject to legal obligations and legitimate interests
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Opt-out of marketing communications, profiling, and automated decision-making
• Right to Withdraw Consent: Withdraw consent for optional data processing at any time
• Right to Lodge Complaints: File complaints with data protection authorities

Marketing Communications: You can opt-out of promotional emails and SMS by clicking the unsubscribe link or adjusting your preferences in your account settings.

To exercise any of these rights, contact us at support@homestove.in or through our account deletion portal at https://homestove.in/account-deletion.

10.Account Deletion

You can request deletion of your account and associated personal data:

• Visit our account deletion portal at https://homestove.in/account-deletion
• Send a deletion request email to support@homestove.in with your account email and full legal name
• Contact our Grievance Officer at support@homestove.in

Important Notes:

• We will process your deletion request within 30 days
• Some data may be retained for legal, tax, and compliance obligations
• Transaction history and billing records are maintained for 7 years as required by law
• After deletion, you will not be able to recover your account or data

11.Children

The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from children under 13 (or the applicable age of digital consent in your jurisdiction).

If you are between 13-18 years old, you may use the Platform only with verifiable consent from a parent or guardian. Parents or guardians who believe we have collected information from a child should contact us immediately at support@homestove.in.

If we discover we have collected data from a child without proper consent, we will delete such data promptly.

12.Third-Party Services and External Links

The Platform may contain links to third-party websites, apps, and services that are not operated by us. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices.

Third-Party Integrations:

• Payment gateways and payment processors
• Analytics and tracking services (Google Analytics, Mixpanel, etc.)
• Social media platforms (if you link your account)
• Mapping and location services
• Communication and messaging services

We recommend reviewing the privacy policies of third-party services before providing them with your information. Your use of third-party services is at your own risk and subject to their terms.

13.Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, and applicable laws. We will notify you of material changes by:

• Posting the updated policy on the Platform with the updated date
• Sending you an email notification at your registered email address
• Requiring your explicit consent for changes affecting your rights

Your continued use of the Platform after changes constitutes your acceptance of the updated Privacy Policy.

14.Grievance and Contact

If you have privacy concerns, complaints, or wish to exercise your rights, please contact:

We aim to resolve grievances within 30 days of receipt. If you are not satisfied with our response, you have the right to file a complaint with the relevant data protection authority or regulatory body in India.