Privacy policy

Who we are and what this covers

TabTill is a point-of-sale service for cafés and restaurants, operated by Brandingwaale (“we”, “us”). This policy covers:

• this website;
• the TabTill dashboard, used by restaurant owners and their teams on the web;
• the guest pages a diner opens by scanning a table QR code: the menu, order tracking, the bill and bill splitting, receipts and tab statements;
• the TabTill Till and TabTill Staff apps for Android, and the kitchen display.

It explains what personal data we process, why, who we share it with and the choices you have. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 of India.

Restaurants and us

TabTill is used by many restaurants, and our role depends on whose data it is:

• Restaurant accounts and their staff. For the data a restaurant and its team give us to use TabTill (sign-in details, business details, subscription billing), we decide how it is used, so we are the Data Fiduciary.
• A restaurant's guests and customers. When you order at a restaurant, join its loyalty programme or run a tab there, the restaurant decides what to collect and why; it is the Data Fiduciary and we are its Data Processor. We use that data only to provide TabTill to that restaurant. Questions about it are best sent to the restaurant first; we will help it answer them.

Each restaurant's data is kept separate from every other restaurant's, on every request.

What we collect

Restaurant owners and staff

• Name, email address, mobile number, role, and the outlets you work at.
• Your password and till PIN. We store only a one-way hash of each, never the password or PIN itself. An optional hourly rate if the owner adds one.
• A profile photo, if you add one.
• Business details: legal and trading name, address, GSTIN, FSSAI licence number, PAN, logo, the UPI ID and payee name shown on the till's UPI QR, receipt text and tax settings.
• What you do in TabTill: orders you take, payments you record, voids, discounts, refunds, shifts and cash ups. Sensitive actions are kept in an audit trail with who did them and when.
• Subscription and billing records for the restaurant's TabTill plan.

Guests who order by QR

• Your name and mobile number, but only if the restaurant asks for them (it may make them optional). Your number is used to send your receipt and, if the restaurant runs one, to find your loyalty account.
• What you order, notes for the kitchen, the table, and your order's status.
• A random order token kept in your browser's storage, so only your phone can follow your order. Your cart is kept there too until you place the order. We do not use cookies to track you on guest pages.
• If you split a bill, the name you choose to show to the others at the table and the share you pay.

A restaurant's regular customers

If a restaurant uses loyalty, gift cards or tabs, it may record your name, mobile number, email address, birthday and anniversary, your visits and spending, loyalty points, gift card balances, and your tab's credit limit, balance and statement.

Payments

• Online payments (UPI, cards, wallets, net banking) are processed by Razorpay on the restaurant's own Razorpay account. We never see or store your full card number, CVV, UPI PIN or banking password. We receive the payment's ID, amount, method and status.
• For payments taken at the counter, staff may record a reference such as a UPI transaction number or the last four digits of a card.
• A restaurant's Razorpay key secret and webhook secret are stored encrypted.

Devices and apps

• For tills and kitchen screens paired to an outlet: the device's name and type, a device key (stored only as a hash) and when it last checked in, so owners can see a device has gone offline.
• A push notification token for each signed-in phone, so we can send order alerts to staff. It is deleted when you sign out.
• Sign-in tokens are kept in the phone's secure, encrypted storage. The apps do not read your contacts, location, call log, SMS messages or other apps.

Technical and security data

Our servers record IP addresses, browser or app details and request logs to keep the service secure, stop abuse (for example, too many requests from one address) and fix errors. Passwords, PINs, secrets and tokens are removed from these logs before they are written.

This website

This website has no analytics, advertising or tracking cookies. It remembers whether you chose the light or dark theme in your browser's local storage, and nothing else. The dashboard uses essential cookies only, to keep you signed in.

Android app permissions

The apps never record audio and do not use your location.

How we use personal data

• To provide TabTill: send orders to the kitchen, show order status, produce bills and GST invoices, take payments and refunds, and run loyalty, gift cards and tabs.
• To sign you in, keep accounts secure and stop fraud and abuse.
• To send what you or the restaurant ask for: receipts and tab statements by WhatsApp, SMS or email, and alerts to staff.
• To bill restaurants for their TabTill plan and to answer support requests.
• To meet legal duties, such as keeping tax records and responding to lawful requests.
• To keep the service running well, using error logs and counts, not by profiling people.

We process data with your consent, or for the legitimate uses the DPDP Act allows, such as providing a service you asked for and meeting a legal obligation. We do not use personal data for advertising and we do not sell it.

Who we share it with

We share personal data only with:

• The restaurant you order from or work for. Your order, name and number go to the staff who need them to serve you.
• Service providers who process it for us under contract, only to run TabTill:
  • Razorpay, for online payments and refunds;
  • Meta (the WhatsApp Business Platform), when a receipt or statement is sent on WhatsApp;
  • SMS gateway providers, when a receipt or sign-in code is sent by SMS;
  • an email delivery provider, for receipts, statements, invitations and account emails;
  • Google Firebase Cloud Messaging, to deliver push notifications to the Android apps;
  • our cloud hosting, database and backup providers.
• Authorities, when Indian law requires it or to protect the rights and safety of our users or the public.
• A buyer or successor, if TabTill is sold or merged, under this policy's protections.

Where data is stored

Data is stored on servers run by our hosting providers. Some providers listed above (for example messaging and push notification services) may process data outside India. When that happens we rely on their contractual safeguards and only transfer data to countries the Government of India has not restricted under the DPDP Act.

How long we keep it

• Account and business data: for as long as the restaurant's account is open.
• Orders, invoices, payments and refunds: for as long as Indian tax law requires the restaurant to keep them (GST law currently requires records to be kept for 72 months from the due date of the annual return), then deleted.
• Bill-splitting sessions that are never paid expire after three hours.
• Push tokens: until you sign out or the token stops working.
• Security logs: for a limited period, then deleted.

When a restaurant closes its account we delete its data, except records we must keep by law, which we delete when that period ends. See how to delete your data.

How we protect it

• Data is encrypted in transit (HTTPS) between the apps, browsers and our servers.
• Passwords, till PINs and device keys are stored only as one-way hashes; payment provider secrets are encrypted.
• Every request is checked against the signed-in person's restaurant, role and outlet.
• Till sessions are short-lived and tied to one paired device; managers confirm sensitive actions with their PIN.
• Guest links use long random tokens that cannot be guessed.

No system is perfectly secure. If a breach affects your personal data, we will tell the people affected and the Data Protection Board of India as the law requires.

Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how it is used;
• ask us to correct, complete or update it;
• ask us to erase it, unless the law requires us to keep it;
• withdraw consent you have given, as easily as you gave it;
• nominate someone to act for you if you die or cannot act yourself;
• raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

Staff can update most of their own details under Profile in the dashboard or the Staff app. For anything else, write to support@brandingwaale.com. If your data was collected by a restaurant (as a guest or regular customer), you can contact the restaurant or us, and we will work with the restaurant to respond. We may need to confirm who you are first. To close an account, follow these steps.

Children

TabTill is meant for businesses and their staff, who must be 18 or older. Guests ordering at a restaurant do not need to give personal data. We do not knowingly collect personal data of children under 18 without verifiable parental consent; if you believe we have, write to support@brandingwaale.com and we will delete it.

Changes to this policy

We will update this page when our practices change and change the date at the top. For significant changes we will also tell restaurant owners in the dashboard or by email before they take effect.

Contact and grievances

Brandingwaale
SCF 147, Second Floor, Huda Market, Sector 37, Faridabad, Haryana 121003

Privacy questions and requests: support@brandingwaale.com
Grievance Officer: Sandeep Gupta, reachable at the same address.

We aim to respond within 30 days.