Privacy Policy — Appalu
Your privacy matters to us. This policy explains how Appalu collects, uses, and protects your data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Information We Collect
- •Vendor data: store name, owner name, email, phone, WhatsApp number, address, food license details
- •Customer data: name, email, phone, delivery address, order history, wishlist data
- •Usage data: device info, location (if shared), browsing activity on the platform
- •User-generated content: comments, reactions, reviews, stories
2. How We Use Your Information
- •Processing and fulfilling orders
- •Connecting customers with vendors via WhatsApp
- •Managing delivery and shipping (domestic and international)
- •Verifying vendor food licenses (FSSAI compliance)
- •Sending order updates, notifications, and compliance follow-ups
- •Improving our marketplace, search, and recommendations
- •Preventing fraud and ensuring food safety compliance
3. Legal Basis (DPDP Act, 2023)
- •We process personal data based on your consent when you register or place an order
- •We process vendor business data for legal compliance (FSSAI verification)
- •You have the right to withdraw consent at any time
4. Data Sharing
- •Vendors can see customer order details (name, phone, address) for fulfillment
- •Delivery partners receive delivery addresses and contact info for shipping
- •We do NOT sell your data to third parties
- •We may share data with government authorities if required by law (e.g., FSSAI inspections)
5. Data Retention
- •Vendor data is retained while the vendor account is active and for 3 years after deletion (for tax/compliance purposes)
- •Order data is retained for 5 years (tax and dispute resolution)
- •Compliance lead data (FSSAI/UDYAM applications) is retained for 7 years
6. Your Rights under DPDP Act
- •Right to access: Request a copy of your personal data
- •Right to correction: Update inaccurate or incomplete data
- •Right to erasure: Request deletion of your data (subject to legal retention requirements)
- •Right to grievance redressal: Contact us for any data-related complaints
- •Right to nominate: Nominate another individual to exercise your rights in case of death/incapacity
7. Data Security
- •All data is stored securely with encryption in transit (HTTPS) and at rest
- •Access is restricted to authorized personnel only
- •Vendor food license documents are stored securely and only used for verification
- •We conduct regular security reviews
8. Cookies and Tracking
- •We use essential cookies for authentication and session management
- •We do not use third-party advertising cookies
- •You can disable cookies in your browser settings
9. Children's Privacy
- •Appalu is not directed at children under 18
- •We do not knowingly collect data from minors
10. International Data Transfers
- •Customer delivery addresses may be shared with international shipping partners for orders outside India
- •We ensure such transfers comply with DPDP Act cross-border data transfer requirements
11. Updates to This Policy
- •We may update this policy from time to time
- •Users will be notified of significant changes via email or in-app notification
- •Last updated date will be displayed at the bottom
Last updated: July 2026