1. Information We Collect Across Our Platforms

A. Ayesha Customer App (com.storeal.customer)

• Personal Identifiers: Name, verified mobile phone number, email address, profile photograph, delivery addresses.
• Precise Location Data: Used strictly while the app is in the foreground to discover nearby restaurants, calculate real-time delivery estimates, and accurately route orders to your doorstep.
• Financial & Transaction Data: Order history, transaction references, billing information (processed securely through PCI-DSS certified payment gateways such as Razorpay/PhonePe; we do not store CVV or card PINs).

B. Ayesha Restaurant Partner App (com.storeal.vendor)

• Business & Contact Details: Owner/Manager name, restaurant business name, FSSAI license number, GSTIN, registered phone number, business email, physical address.
• Bank & Payout Data: Bank account number, IFSC code, account holder name for order settlements and payouts.
• Operational Data: Menu items, pricing, inventory availability, order processing timings, advertisement campaign preferences.

C. Ayesha Delivery Partner App (com.storeal.rider)

• Driver KYC & Identity Data: Full name, verified mobile phone number, Driving Licence details, Vehicle Registration (RC), Aadhaar/PAN verification details (where legally required for contractor onboarding).
• Background & Foreground Location Data (Prominent Disclosure):
  Prominent Location Disclosure: The Ayesha Delivery Partner app collects precise background location data even when the application is closed or not in active use, solely when the delivery partner is toggled to "Online" / "On Duty". This enables automatic dispatching of nearby food orders, live order tracking for customers and restaurants, accurate delivery fee calculation, and safety monitoring during active deliveries. Location collection stops immediately upon switching status to "Offline".
• Earnings & Payout Data: Bank account information, completed delivery milestones, payout statements.

2. Purpose of Data Processing

• To facilitate food ordering, table reservations, restaurant management, and doorstep delivery.
• To authenticate accounts securely using SMS OTP via Firebase Authentication & SMS gateways.
• To track live order status and provide accurate ETAs to customers.
• To comply with statutory food safety regulations (FSSAI) and tax obligations (GST/TDS).
• To detect, investigate, and prevent fraudulent transactions or security breaches.

3. Data Sharing and Third-Party Disclosures

We do not sell, rent, or trade your personal data. We share necessary operational data only with:

• Restaurant Partners: Customer name, delivery address, and ordered items to prepare your meal.
• Delivery Riders: Customer name, drop-off location coordinates, and masked/in-app contact options to fulfill delivery.
• Payment Gateways: Encrypted transaction tokens passed to RBI-authorized payment aggregators (e.g. Razorpay, PhonePe, Cashfree).
• Cloud & Authentication Providers: Google Firebase (Phone OTP, Cloud Messaging, Crashlytics) and secure hosting servers.
• Law Enforcement & Government Authorities: Disclosed only upon receiving lawful warrants or court orders under Indian jurisdiction.

4. User Rights Under the DPDP Act, 2023

Every user (Data Principal) has the following legal rights regarding their personal data:

• Right to Access: You may request a summary of your personal data processed by Ayesha.
• Right to Correction & Erasure: You can update inaccurate profile details directly in the app or request full account deletion via in-app settings (Profile > Delete Account) or by visiting https://videomate.online/account-deletion.html.
• Right of Grievance Redressal: You have the right to readily accessible grievance resolution as detailed below.
• Right to Nominate: You may nominate any individual to exercise your data rights in the event of death or incapacity.

5. Data Retention & Security Practices

We employ industry-standard 256-bit SSL encryption for data in transit and secure database hashing (bcrypt/argon2) for sensitive credentials. We retain personal data only for as long as necessary to fulfill the operational purposes or as mandated by Indian statutory laws (e.g., maintaining financial records for 7 years under the Companies Act and GST regulations).

6. Indian Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the designated Grievance Officer for Ayesha is:

Grievances will be acknowledged within 24 hours and resolved within 15 working days as prescribed under the applicable Indian IT Rules.