Privacy Policy

Section 1

Who We Are

BHOJFLOW is a sole proprietorship owned and operated by Sushant Rana under the trade name BHOJFLOW.

BHOJFLOW is a restaurant POS, billing, QR ordering, kitchen flow, and daily restaurant operations platform built for Indian restaurants.

This Privacy Policy applies to the website at https://www.bhojflow.in, related product pages, demos, onboarding, support interactions, and the BHOJFLOW platform used by restaurant owners, managers, staff members, and authorized users.

Section 2

What Data We Collect

Depending on how BHOJFLOW is used, we may collect and process the following categories of data:

• Restaurant owner data such as name, email address, mobile number, outlet name, business details, support requests, subscription records, and onboarding information.
• Staff account data such as staff names, roles, permissions, login identifiers, employee codes, activity logs, and security settings created by the restaurant.
• Customer and order data entered by restaurants, including guest names, contact numbers, table details, item selections, order notes, bill details, and service history.
• Billing and payment data such as plan details, invoice records, tax information, GST details, payment status, refunds, renewals, and payment references.
• Device, IP, browser, operating system, cookie, usage, server log, crash report, and analytics data related to access to the website or platform.

Section 3

Restaurant Owner, Staff, and Customer Data

Restaurant owners and authorized managers provide account, billing, outlet, and operational data so BHOJFLOW can deliver the subscribed service.

Restaurants may create staff accounts inside the platform and remain responsible for ensuring that their staff data is lawfully collected, entered, reviewed, and used.

Restaurants may also enter customer and order data into BHOJFLOW. In those cases, the restaurant controls the business purpose for that information, and BHOJFLOW generally processes that data on the restaurant's behalf in order to provide software functionality.

Section 4

Why We Collect Data

• To create and secure workspaces, user accounts, and login access.
• To provide POS, billing, QR ordering, kitchen flow, reporting, and daily restaurant operations features.
• To manage subscriptions, renewals, invoices, taxes, support, and refunds.
• To monitor uptime, misuse, fraud, bugs, runtime crashes, and security incidents.
• To send service communications including OTPs, payment updates, support replies, and onboarding messages.
• To improve product quality, feature performance, operational support, and platform reliability.
• To meet legal, audit, contractual, or regulatory requirements.

Section 5

Consent and Withdrawal

Where consent is the basis for processing, we seek consent through sign-up flows, settings, cookie notices, feature prompts, or other clear notices.

Where reasonably applicable, consent may be withdrawn by contacting us, changing account settings, disabling a feature, or stopping use of the relevant workflow.

Withdrawal of consent will not invalidate processing already lawfully carried out before withdrawal and may limit our ability to continue providing the affected feature or service.

Section 6

Sharing with Service Providers

We may share information only where reasonably required to operate, secure, support, or lawfully provide BHOJFLOW.

• Hosting, infrastructure, cloud storage, backup, database, and uptime providers.
• Payment, invoice, subscription, and bookkeeping support providers.
• SMS, OTP, WhatsApp, email, notification, and telephony providers.
• Analytics, monitoring, logging, crash reporting, and support tooling providers.
• Professional advisers such as accountants, auditors, legal advisers, or compliance advisers working under confidentiality obligations.
• Government authorities, courts, regulators, or law enforcement where required by law or valid legal process.

Section 7

Cookies, Device, IP, Log, and Analytics Data

We use cookies and similar technologies for essential session handling, security, analytics, and service performance monitoring.

We may collect browser type, device identifiers, operating system, IP address, request logs, login metadata, page activity, runtime crash diagnostics, and analytics signals to secure and improve the service.

Analytics and support tooling may help us understand usage patterns, onboarding friction, page performance, and product errors.

Section 8

Data Retention

We retain data only for as long as reasonably needed for the purpose for which it was collected, to deliver the service, or to meet legal, tax, audit, security, and dispute-resolution obligations.

Restaurant workspace data may remain available while the account is active and for a reasonable post-closure period subject to backups, legal retention duties, and issue-resolution needs.

Logs, crash reports, and security records may be retained for fraud prevention, incident response, diagnostics, and platform reliability work.

Section 9

Security Safeguards

We use reasonable administrative, technical, and organizational safeguards to protect data against unauthorized access, misuse, alteration, loss, or disclosure.

These safeguards may include authentication controls, role-based access, encryption where appropriate, vendor controls, backups, monitoring, and least-privilege access practices.

Section 10

User Rights

Subject to applicable law, users may request access, correction, deletion, consent withdrawal, or grievance-related information about personal data handled by BHOJFLOW.

We may ask for reasonable verification before acting on a request, and we may retain or decline to delete information where retention is required for legal, tax, audit, fraud-prevention, or security purposes.

Section 11

Children and Minors

BHOJFLOW is designed for business use by restaurants and is not intended for direct use by children or minors.

We do not knowingly offer account access to children. If we learn that personal data has been provided in a way not allowed by applicable law, we may delete it or take other reasonable corrective steps.

Section 12

Data Breach Notice

If we become aware of a personal data breach or security incident affecting personal data, we will investigate, contain, and respond based on the nature of the incident and applicable law.

Where required, we may notify affected users, restaurant customers, service providers, or relevant authorities within the timeframe required by law or incident-response obligations.

Section 13

Grievance Officer Details

Grievance Officer: Sushant Rana

Email: support@bhojflow.in

Principal Place of Business: Rana Niwas , Lane no.21 Krishna nagar, Roorkee

If you have a privacy complaint, rights request, or grievance relating to data handled by BHOJFLOW, you may write to the Grievance Officer using the above details.

Section 14

Updates to This Policy

We may update this Privacy Policy from time to time to reflect product changes, legal developments, security improvements, or operational changes.

The latest version will appear on this page with an updated effective date and last updated date.