Privacy Policy
Last updated: July 8, 2026
KhidePeyechhe ("we", "us", or "our") operates the website khidepeyechhe.com and the KhidePeyechhe cloud-based restaurant POS & operating system (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
We operate in India and other global regions. This policy is designed to comply with the Digital Personal Data Protection Act 2023 (DPDPA), the Information Technology Act 2000 (India), and the General Data Protection Regulation (GDPR) for global transactions.
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
1. What We Collect
Account Information
- Full name, email address, phone number, and hashed password when you register.
- Organisation name, branch name, and business address.
- Role and permission levels (superadmin, branch admin, cashier, waiter, kitchen staff).
Business Data
- Menu items, categories, pricing, and images.
- Table layouts, floor configurations, and Kitchen Display System (KDS) station settings.
- Orders, transactions, payment records, and customer receipt logs.
- Inventory levels, supplier details, and purchase records.
- Staff attendance and shift information.
Technical Data
- IP address, browser type and version, and operating system.
- Pages visited, time spent on pages, and navigation patterns.
- Device type (desktop, tablet, mobile) and screen resolution.
- Error logs and performance metrics for system reliability.
2. How We Use Your Data
We use the information we collect for the following purposes:
- Service Delivery: To operate, maintain, and provide the POS system, KDS, order management, and dashboard features.
- Account Management: To create and manage your account, authenticate logins, and enforce role-based access control.
- Billing and Payments: To generate invoices, process subscription payments, and manage billing alerts.
- Communication: To send transactional updates (receipts, notifications, support ticket updates, security notices).
- System Improvement: To analyse system usage and performance, troubleshoot bugs, and design new features.
- Security & Integrity: To prevent fraud, abuse, automated scraping, and unauthorized access.
- Compliance: To satisfy tax, auditing, and other statutory requirements.
3. Data Storage & Security
We implement industry-standard technical and organizational security measures to protect your data:
- Encryption in Transit: All web requests are strictly served over HTTPS with TLS encryption.
- Encryption at Rest: Payment integration keys and sensitive settings are encrypted using AES-256 before database storage.
- Password Security: Passwords are secure-hashed using bcrypt. We never store plain text passwords.
- Token Authentication: API access is governed by JWT-based secure sessions.
- Input Sanitisation: Strict inputs sanitisation and prepared queries to prevent SQL injections and XSS attacks.
We do not store raw credit/debit card numbers. All electronic payments are processed directly by our PCI-DSS compliant payment gateway partners.
4. Third-Party Services
We share necessary information with reliable third-party infrastructure and service providers:
Hosting & Cloud Database
Our servers and databases are hosted on standard cloud infrastructure (such as Railway or similar), protecting data integrity with strict network access controls.
Media File Storage
Images of menu items, layouts, and brand logos are securely stored and delivered globally using Cloudflare R2 storage systems.
Payment Gateways
Subscription payments and client orders are processed securely via integration with PCI-DSS compliant providers like Razorpay (for India operations) and Stripe (for global card processing).
5. Cookies & Local Storage
We use minimal cookies and web storage components to provide seamless client features, especially for offline-first capabilities (localStorage, IndexedDB databases, and Service Workers). Detailed info can be found in our Cookie Policy.
6. Your Rights & Choice
Under applicable Indian laws (such as DPDPA 2023) and global regulations, you are entitled to the following rights:
- Right to Access & Summary: Request information about what data we hold and how we process it.
- Right to Correction: Request correction of inaccurate, incomplete, or outdated business and contact details.
- Right to Erasure: Request the deletion of your personal account data (when no longer needed for active subscriptions or legal compliance).
- Right to Withdraw Consent: Revoke consent previously granted for specific non-essential features.
To exercise these rights, please send an inquiry to hello@khidepeyechhe.com. We will process and address your request within 30 days.
7. Data Retention
We retain your data only for as long as necessary for the business relationship or to fulfill legal requirements:
- Account details: Deleted within 30 days of subscription termination or account cancellation request.
- Order and Financial Transactions: Retained for 7 years to satisfy regulatory tax and accounting obligations.
8. Controller & Processor Roles
For transactions involving restaurant customers (e.g. patrons order details, QR menu, customer names printed on bills):
KhidePeyechhe — Data Processor
We store and index order logs strictly on behalf of the restaurant. We act as the processor, handling database rows under instruction from the restaurant admin.
Restaurant Partner — Data Controller
The restaurant using our POS is the data controller for their patrons' details. If you are a customer of a restaurant using our system, you should request any data updates or erasures directly from the restaurant owner.
9. Contact Us
If you have any queries about this policy, please contact our support desk:
Email support
hello@khidepeyechhe.comCall / WhatsApp
+91 9064907221