Privacy Policy

Version 2026-09-16.3

Churmuri ("we", "us") operates the Churmuri ordering platform, used by restaurants to take orders — at the table, for pickup, and for delivery. This policy explains what we collect from you, why, and what you can do about it.

What we collect

From a customer placing an order:

• Dine-in and pickup orders: the items ordered and a table or order number. No name or phone number is required.
• Delivery orders: your name, phone number, and delivery address, so the restaurant can prepare, deliver, and reach you if something goes wrong.
• Phone verification (where a restaurant has switched it on): your phone number, verified by an SMS code, to confirm it is genuinely yours before an order is accepted.
• An optional rating you may leave after your order is complete.

From a restaurant's own staff:

• Name, email address (via Google Sign-In), phone number, and role (owner, manager, reception, or kitchen).
• The restaurant's own business details: name, menu, prices, photos, and payment collection details (a UPI ID — never card numbers, which we never handle or store).

What we do not collect

We do not process payments. Orders are settled directly between you and the restaurant — cash on delivery, or a UPI payment you make yourself, scanning a code the restaurant provides. We never see or store your card, bank, or UPI PIN details. We do not track your location, and we do not use advertising trackers or sell data to advertisers.

Why we collect it

• To take and prepare your order, and to let you check its status without creating an account.
• To let a delivery rider reach you, and to let you reach them.
• To send you order receipts, updates, special offers, and promotional messages on WhatsApp (where you explicitly opt in).
• To help restaurants suggest dishes people order together — done using overall patterns, not by singling out what you personally ordered.
• To run the staff side of the platform — logins, permissions, and each restaurant's own records of its business.

Who else sees it

Churmuri runs on infrastructure operated by other companies, who process data on our behalf as part of providing that infrastructure:

• Google Firebase — where all data described above is stored, and which handles staff sign-in.
• Cloudinary — hosts menu photos uploaded by restaurants.
• Vercel — hosts the website itself.
• Sentry — where enabled, receives technical details about errors (such as a stack trace) to help us fix bugs; not used for tracking or advertising.

Each of these may process data outside India as part of how their infrastructure operates. We do not sell your data to anyone, or share it with advertisers.

Consent

Where we collect your name or phone number — a delivery order, a bill request, a reservation, or a counter order where you chose to give them — we ask you to tick a box first, saying what the details will be used for (including sending order updates, special offers and promotions on WhatsApp). We record that you agreed, the timestamp when consent was given, and which version of this policy you were shown. We do not treat placing an order as agreement on its own.

You can withdraw that consent at any time, and it is no harder than giving it: write to the restaurant you ordered from, or to us at the address below, and say so. Withdrawing consent does not undo anything done while it was in place, and we may still keep what a tax or accounting law requires us to keep — see below.

How long we keep it

Customer contact details are kept for 180 days after your most recent order, and then erased. That window exists so a restaurant can deal with a complaint, a refund, or a repeat visit. If you withdraw consent or ask for erasure before then, we erase them sooner — see below.

Two things outlast that window. Order and billing records (what was ordered, what it cost, what tax was charged) are kept for as long as Indian tax and accounting law requires — currently up to eight years — because we are obliged to, not because we choose to. Staff accounts are kept while the person still works at a restaurant using Churmuri, and removed when their access is removed.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

• Show you what personal data we hold about you and who we have shared it with.
• Correct or complete anything inaccurate or out of date — a misspelt name, an old phone number.
• Erase your personal data, unless a law requires us to keep it.
• Withdraw consent you previously gave, as easily as you gave it.
• Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
• Complain to us, and — if we do not resolve it — to the Data Protection Board of India.

Deleting your data

You do not need an account to use Churmuri as a customer, so there is no account to close — but you can still have everything we hold about you erased. Email info@churmuri.com with the phone number you ordered with and the words “delete my data”, or ask the restaurant you ordered from — every restaurant on Churmuri can edit and delete its own customer records directly, from its console.

We will confirm and complete erasure within 30 days. What we cannot erase is the billing record a tax law requires us to retain; where that applies we will tell you exactly what is being kept and why. Staff members: ask your restaurant's owner to remove your access, which removes your account.

Grievance redressal

If you have a question or complaint about how your data has been handled, contact our Grievance Officer:

Ramesh Dangi, Grievance Officer
theaceterminal@gmail.com
+91 80911 90568

We aim to acknowledge within 72 hours and resolve within 30 days. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

If something goes wrong

If personal data we hold is exposed or lost in a way that could affect you, we will notify the Data Protection Board of India and every person affected, describing what happened, what it may mean for you, and what we are doing about it.

Restaurants and Churmuri

Each restaurant decides what it collects from its own customers and is responsible for that data. Churmuri provides and runs the software that stores it on the restaurant's behalf. If you ordered from a restaurant, you can raise a request with either of us — we will help the restaurant act on it.

Children

Churmuri is not directed at children, and we do not knowingly collect data from anyone under 18.

Changes to this policy

If this policy changes in a way that matters, we will update the date at the top of this page.

Contact

Churmuri
Solan, Himachal Pradesh, India
info@churmuri.com
+91 80911 90568