Privacy Policy

1. Who we are

MSM Global Consulting Private Limited, trading as Table Foundry, operates this platform. For data collected at the platform level — browsing this directory, logging in, your Table Foundry account itself — Table Foundry is the data fiduciary under the Digital Personal Data Protection Act, 2023.

Once you place an order with a specific restaurant, that restaurant becomes the data fiduciary for that order's data (items, delivery address, order history with them), and Table Foundry acts as their data processor — running the software on their instructions. Details are in that restaurant's own Privacy Policy, linked from its page.

2. What we collect at the platform level

• Mobile number, confirmed by OTP — to log you in across the platform.
• Technical data: IP address, browser and device type, pages opened, error logs — to keep the platform secure, stop fraud, and fix problems.
• Login and session data kept in your browser — to keep you logged in. See our Cookie Policy.

Order-specific data — your name, delivery address, order items, order notes, email if you give one — is collected on each restaurant's own ordering page, for that restaurant, as described in its own Privacy Policy. Table Foundry doesn't merge a diner's order history across different restaurants into one profile.

3. Why we use it, and on what basis

• Logging you in and keeping your session working — necessary to provide the service you asked for (DPDP Act, section 7(a)).
• Keeping the platform secure and stopping fraud or fake accounts — to protect you, restaurants on the platform, and the service.
• Understanding platform-wide usage, in combined, non-identifying totals — to improve the software.

We don't use this data for advertising, don't build an advertising profile of you, and don't make automated decisions about you that have a legal or similar effect.

4. Who we share it with

• The restaurant you order from — your order-specific data, for that order only, as described in that restaurant's Privacy Policy.
• Razorpay — amount and payment reference, to process payment and refunds.
• WhatsApp (Meta) and our authorised SMS providers — mobile number, to send OTPs.
• Cloud hosting and database providers — stored data, to run the platform and keep it secure.
• Government, courts or police — only what the law requires.

We never sell your personal data, and don't share it with advertisers.

5. Where your data is stored

Your data is stored on secure cloud servers used by Table Foundry. Some service providers, such as WhatsApp (Meta), may process data outside India — we only use providers that protect data properly and follow any applicable Indian government restrictions on cross-border data transfer.

6. How long we keep it

Your platform-level login data is kept until you ask us to delete it, or 24 months after your last activity on the platform, whichever comes first. Security and access logs are kept at least 1 year, as the law requires. Order-specific data is retained as described in the restaurant's own Privacy Policy, including the tax/accounting retention periods the law requires.

7. How we keep it safe

• Everything on this platform travels over an encrypted connection (HTTPS).
• Logins use a one-time password, not a reusable password.
• Access to data is limited to what's needed to run the service.
• Secrets and keys are stored encrypted.
• Payments are handled by Razorpay, which follows card-industry security standards (PCI DSS).

No system is perfectly secure. If a data breach affects you, we'll tell you and the Data Protection Board of India, as the law requires.

8. Your rights

• Show you a summary of the platform-level data we hold about you.
• Correct, delete, or withdraw consent for platform-level data — write to us using the contact details below.
• Name a nominee who can use these rights for you if you die or can't act for yourself.
• Complain to our grievance officer, and then to the Data Protection Board of India.

For data tied to a specific order, use that restaurant's own contact details instead — they hold that data as the data fiduciary for it. We acknowledge a request within 48 hours and complete it within 30 days.

9. Children

This platform is for people aged 18 and over. We don't knowingly collect data from anyone under 18. If you believe a child has used the platform, contact us and we'll delete their data.

10. Cookies and browser storage

Details of what we store in your browser, and why, are in our Cookie Policy.

11. Grievance officer

For Table Foundry (the platform)

to be confirmed

We acknowledge complaints within 48 hours and resolve them within one month. If you're not satisfied with our answer, you can complain to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

12. Changes to this policy

If we change this policy, we'll post the new version here with a new date. This page is separate from — and can change independently of — any individual restaurant's own Privacy Policy.