Privacy Policy

1. Information We Collect

1.1 Account Information

When you register or log in, we collect:

• Mobile number (used for OTP-based authentication)
• Full name (required)
• Email address (optional)

1.2 Business Information

When you set up or manage a place, we collect:

• Place name, type, categories, and cuisine tags
• Business address and geographic location (coordinates)
• Contact number associated with the place
• Opening hours and service configuration (e.g., preparation time, service charge)
• Place description and images submitted for review

1.3 Menu and Item Data

When you create or manage menus, we collect:

• Menu categories, item names, descriptions, and images
• Pricing information including base price, GST slab, and variants
• Addon groups and availability settings
• Historical versions of items submitted for moderation review

1.4 Staff and Access Data

If you add staff members to your place, we collect:

• Mobile numbers of staff accounts granted access
• Role assignments and permission sets for each staff member

Staff members are notified through their own account activity when access is granted or modified.

1.5 Analytics Data

We collect aggregated engagement data for your place, including:

• Number of appearances in nearby discovery results
• Place and item click counts
• QR code scan counts
• Appearance distribution by distance from the user

This data is tied to your place, not to individual end-users.

1.6 Billing and Usage Data

We collect and store:

• Monthly usage metrics used to determine your billing tier
• Bill history, payment status, and billing cycle records

1.7 Session and Activity Data

• Last login time and IP address
• Account activity relevant to security and fraud prevention

2. How We Use Your Information

We use collected data to:

• Authenticate and identify you as a partner account
• Enable you to create and manage your place, menus, and staff
• Process place setup and edit requests through our internal review workflow
• Display your place and menu information to end-users of the AtSeat app
• Generate and present analytics reports for your place
• Calculate and issue monthly bills based on usage
• Communicate operational updates relevant to your account or place
• Maintain platform security and integrity

We do not use your data for advertising, profiling, or selling to third parties.

2.1 Content Review

Certain submissions — including place setup requests, edit requests for review-gated fields (name, description, address, images), and menu item changes — are reviewed by AtSeat's internal team before being published. Submitted data is accessible to authorised AtSeat staff for this purpose only.

3. Third-Party Services

AtSeat Partner uses the following categories of third-party services:

• SMS providers — to deliver OTP codes to your mobile number for authentication. Your phone number is transmitted to the SMS provider solely for this purpose.
• Map and geocoding services — to resolve place addresses into geographic coordinates and to validate or display location information. Only coordinate or address data is shared, without attaching personal identity.
• Infrastructure and cloud services — to host, store, and operate the Partner App and its database.

No personally identifiable information is shared with third parties beyond what is strictly necessary for these purposes. Their use of data is governed by their own privacy policies.

4. Data Storage and Security

• All data is stored securely using industry-standard practices
• Authentication sessions are stored as hashed tokens; raw session values are never persisted
• OTP codes are stored in hashed form and expire after a short window
• Access to data is restricted to authorised systems and personnel
• We take reasonable technical and organisational measures to protect against unauthorised access, loss, or misuse

5. Data Retention

We retain data for as long as is necessary to:

• Provide and operate the Partner App
• Fulfil billing and financial record-keeping obligations
• Comply with applicable legal requirements

Specific retention notes:

• Analytics records are retained for up to 2 years from the date of collection
• Billing records are retained as required for accounting and legal compliance
• Upon account deletion, active account data is removed promptly. A limited backup may be retained for up to 15 days for recovery, fraud prevention, or legal compliance, after which it is permanently deleted.

6. Data Sharing

We do not:

• Sell partner data to any third party
• Share data for advertising or marketing purposes
• Track partners across external apps or services

Data is shared only in the following limited circumstances:

• With end-users — published place and menu information (name, address, hours, menu items, images) is visible to all AtSeat app users once approved.
• With internal review staff — pending place and item submissions are accessible to authorised AtSeat administrators for moderation.
• With third-party services — as described in Section 3, limited to what is required for functionality.
• When required by law — we may disclose information if required by applicable legal process or regulatory authority.

7. Your Choices and Rights

As a partner, you can:

• Update your profile information (name, email) at any time from within the app
• Manage staff access and revoke permissions for any staff member
• Request changes to published place or menu information through the edit request workflow
• Delete your account directly from the app

Account deletion can be initiated from:
Profile → Privacy & Security → Delete my account

Deleting your account does not automatically remove place or menu data associated with your place if other owners or staff members remain active. Place data is managed at the place level and persists independently of individual account deletion.

If you log in or create a new account using the same mobile number after requesting account deletion, you may continue to use the app normally. However, if the deletion process for a previous account is still in progress, requesting another account deletion using the same mobile number may be temporarily restricted until the earlier deletion is fully completed.

8. Children's Privacy

The AtSeat Partner App is intended for use by adults operating a business. We do not knowingly collect data from individuals under the age of 18. If we become aware that a minor has registered as a partner, we will take steps to remove the account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Partner App or by email if provided. Continued use of the Partner App following an update constitutes acceptance of the revised policy.

10. Contact Us

For privacy-related questions or requests, contact:
Email: support@atseat.in