Version 1.0 · Operated by Servly Pvt Ltd
Servly is a digital ordering platform for restaurants. When you scan a QR code at a participating restaurant, you can browse the menu, place an order, and pay at the counter — all from your phone. Servly acts as a technology provider connecting you with the restaurant.
| Data | When Collected | Why |
|---|---|---|
| Email address | When you place your first order (OTP verification) | To create your account, send the one-time password (OTP), and enable order communication |
| Phone number | When you place your first order | To identify your account and enable order communication |
| Name | When you create your account | To personalise your experience and associate orders with your identity |
| Order details | Each time you place an order | To process your order and share it with the restaurant for fulfillment |
| IP address | Automatically on each visit | For platform security, fraud prevention, and legal compliance under the DPDP Act |
| Device information | Automatically on each visit | Browser type and OS — to ensure the application renders correctly on your device |
What we do NOT collect
| Purpose | Legal Basis (DPDP Act 2023) |
|---|---|
| Processing and fulfilling your food order | Legitimate use — Section 7(a): data voluntarily provided for a specified purpose |
| Sharing order details with the restaurant | Legitimate use — necessary for order fulfillment |
| Sending OTP codes and order status updates | Legitimate use — necessary for service delivery |
| Platform security and fraud prevention | Legitimate use — necessary for safe operation of the service |
| Service improvement through anonymised analytics | Anonymised data falls outside the scope of the DPDP Act |
What we will NEVER do
When you place an order, the restaurant receives your name, order details, and phone number (only if needed for order communication).
Each restaurant is contractually required to: use your data only for order fulfillment, not share it with third parties, not use your phone number for marketing, and delete your data upon termination of their agreement with Servly.
| Data Type | How Long We Keep It |
|---|---|
| Account data (name, phone number) | Until you request deletion, plus 6 months for fraud prevention |
| Order history | 24 months from the date of each order |
| Consent records | 3 years after your last interaction with Servly |
| IP address and device logs | 12 months |
Financial records (GST/tax) may be retained for up to 8 years as legally required.
Right to Access
Request a summary of the personal data we hold about you (Section 11)
Right to Correction
Request correction of inaccurate or incomplete personal data (Section 12)
Right to Erasure
Request deletion of your personal data, subject to legal retention requirements (Section 12)
Right to Withdraw Consent
Withdraw your consent at any time without affecting prior lawful processing (Section 6(4))
Right to Grievance Redressal
File a complaint if you believe your data rights have been violated (Section 13)
Right to Nominate
Nominate another person to exercise your rights on your behalf in case of death or incapacity (Section 14)
To exercise any of these rights, contact our Grievance Officer. We will acknowledge your request within 48 hours.
In the event of a personal data breach, we will notify the Data Protection Board of India and all affected users as required under Section 8(6) of the DPDP Act, 2023.
Servly is intended for users aged 18 years and above. If you are under 18, you may use Servly only with the knowledge and consent of your parent or legal guardian. We do not knowingly collect personal data from children without verifiable parental consent, as required under Section 9 of the DPDP Act, 2023.
| Service | Purpose | Data Shared |
|---|---|---|
| Oracle Cloud Infrastructure | Backend hosting and database | All platform data (stored securely) |
| Cloudflare | Frontend hosting, CDN, DDoS protection | Page requests, IP address |
| ZeptoMail | OTP delivery via email | Email address (for verification only) |
As required under Section 8(10) of the Digital Personal Data Protection Act, 2023:
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India (once constituted and operational).
By using Servly, you confirm that you have read, understood, and agree to this Terms of Service & Privacy Policy (Version 1.0), including all future updates and modifications.