Version 1.0 · Operated by VortekAI Solutions
Servly is a digital ordering platform for restaurants. When you scan a QR code at a participating restaurant, you can browse the menu and place an order from your phone. You pay the restaurant at your table or at the counter. Servly acts as a technology provider connecting you with the restaurant.
| Data | When Collected | Why |
|---|---|---|
| Email address | If you choose to sign in (OTP verification) | To create your account and send you the sign-in code. After payment we also email your receipt to it. Guests who order without signing in give no email address |
| Phone number | If you choose to sign in | To create your account. We do not verify it. The sign-in code goes to your email address |
| Name | When you create your account | To personalise your experience and associate orders with your identity |
| Order details | Each time you place an order | To process your order and share it with the restaurant for fulfillment |
| IP address | Automatically on each visit | For platform security, fraud prevention, and legal compliance under the DPDP Act |
| Device information | Automatically on each visit | Your browser's user-agent text. We store it when you scan a QR code (to count scans for the restaurant), when you sign in, and when you accept the Terms or a cookie choice |
| Food preferences and allergens | If you save them in your profile | Copied onto your orders so the restaurant sees your allergens |
| Reviews | When you write a review (rating, tags, comment) | To show ratings for menu items |
| Terms and cookie records | Each time you accept the Terms or make a cookie choice | Proof of your choice: the time, your IP address and your browser |
| QR-scan records | When you scan a table QR code | To count scans for the restaurant |
| Device identifier | Created at random on your device and sent with each request | Saved with your sign-in session, with your IP address and browser, when you sign in |
| Details restaurant staff type for you | When staff place an order for you at the counter | Your name and phone are saved on that order |
| Cookies and device storage | While you use the app | See the Cookie Policy |
What we do NOT collect
| Purpose | Legal Basis (DPDP Act 2023) |
|---|---|
| Processing and fulfilling your food order | Legitimate use — Section 7(a): data voluntarily provided for a specified purpose |
| Sharing order details with the restaurant | Legitimate use — necessary for order fulfillment |
| Sending OTP codes and order status updates | Legitimate use — necessary for service delivery |
| Platform security and fraud prevention | Legitimate use — necessary for safe operation of the service |
| Suggesting dishes to signed-in diners from their orders at all Servly restaurants | Covered by the service consent you give when you accept these Terms |
| Service improvement through anonymised analytics | Anonymised data falls outside the scope of the DPDP Act |
What we will NEVER do
When you place an order, the restaurant sees your name (or Guest), your order and your allergens. If you signed in, your phone number is saved on the order, and the restaurant's staff can see it.
Restaurants accept Servly's merchant terms before they use the dashboard. When a restaurant's subscription ends without renewal, its dashboard is blocked 30 days after expiry. In days 16 to 30 after expiry it can only export data and read reports.
| Data Type | How Long We Keep It |
|---|---|
| Account data (name, phone number) | Until you request deletion, plus 6 months for fraud prevention |
| Order history | 24 months from the date of each order |
| Consent records | 3 years after your last interaction with Servly |
| IP address and device logs | 12 months |
Financial records (GST/tax) may be retained for up to 8 years as legally required.
Right to Access
Request a summary of the personal data we hold about you (Section 11)
Right to Correction
Request correction of inaccurate or incomplete personal data (Section 12)
Right to Erasure
Request deletion of your personal data, subject to legal retention requirements (Section 12)
Right to Withdraw Consent
Withdraw your consent at any time without affecting prior lawful processing (Section 6(4))
Right to Grievance Redressal
File a complaint if you believe your data rights have been violated (Section 13)
Right to Nominate
Nominate another person to exercise your rights on your behalf in case of death or incapacity (Section 14)
To exercise any of these rights, contact our Grievance Officer. We will acknowledge your request within 48 hours.
In the event of a personal data breach, we will notify the Data Protection Board of India and all affected users as required under Section 8(6) of the DPDP Act, 2023.
Servly is intended for users aged 18 years and above. If you are under 18, you may use Servly only with the knowledge and consent of your parent or legal guardian. We do not knowingly collect personal data from children without verifiable parental consent, as required under Section 9 of the DPDP Act, 2023.
| Service | Purpose | Data Shared |
|---|---|---|
| Oracle Cloud Infrastructure | Runs our backend servers and database | Platform data held in the database, and private files |
| Cloudflare | Serves the web screens (frontend hosting, CDN, DDoS protection). Cloudflare R2 stores menu photos and database backups | Page requests and IP addresses; menu photos and database backups |
| ZeptoMail | Sends our emails (sign-in codes, receipts, deletion notices) | Your email address and the content of the email |
| Sentry | Error and performance monitoring | Error, performance and browser details, sent by the diner app's browser and our servers to keep the app working. The browser adds your IP address only after you accept in the cookie banner |
As required under Section 8(10) of the Digital Personal Data Protection Act, 2023:
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India (once constituted and operational).
By using Servly, you confirm that you have read, understood, and agree to this Terms of Service & Privacy Policy (Version 1.0), including all future updates and modifications.