This Privacy Policy explains how NestOrder (“we”, “us”, or “our”) collects, uses, stores, and shares personal data when you use the NestOrder mobile application and related websites (together, the “App”).
NestOrder acts as a Data Fiduciary for personal data we control in connection with the App, under the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws. Where the law requires consent (for example precise location or camera), we ask through system / App prompts.
1. Who we are
NestOrder is a local ordering platform that connects residents with neighbourhood stores (grocery, medical / pharmacy, bakery, hardware, electricals, restaurant, and similar) and helps shopkeepers and authorised staff manage catalog, orders, delivery or pickup, and store credit (khata). Privacy, data, and grievance requests: privacy@nestorder.in
2. Information we collect
Customers
- Name, phone (OTP sign-in), flat / unit, and delivery address(es)
- Order details (items, prices, coupons, fees, delivery or pickup, schedule, status, cancellations, shop adjustments)
- Missing-item reports; khata dues / payments with a store; saved stores and favourites
- Notification preferences; location if allowed; push token; crash / diagnostic data when enabled
- Session tokens after OTP; camera only when you scan a store invite / QR
Shopkeepers and staff
- Store profile, catalog and images, map pin, hours, fees, fulfilment options
- Sign-in phone; staff invite name and phone; subscription / trial status
- Customer order, cancellation, issue, and khata data needed to run that store
We do not knowingly collect payment card details in the App today; checkout is typically cash / pay on delivery or as agreed with the store.
3. How we use information
- Create and manage accounts; place, fulfil, adjust, and cancel orders
- Support delivery and pickup; share details with the fulfilling store and authorised staff
- Maintain khata ledgers; send transactional OTP and order messages
- Optional promo / reminder messages only if enabled
- Store discovery, invites / QR, shopkeeper tools; security, fraud prevention, compliance
We do not sell personal data.
4. How we share information
- With the fulfilling store and its authorised staff (order, contact, address / pickup, issues, khata)
- With customers: limited store information needed to browse and order
- With service providers who process data on our behalf only as needed — for example cloud hosting and databases, image storage, SMS delivery, push notifications, maps / address lookup, and crash analytics (in India or other countries where they operate)
- When required by law or to protect users and the platform
If a shopkeeper or staff member shares order or customer details outside the App, they are responsible for that sharing.
5. Legal basis (India)
We process personal data to provide the App you request, to perform contracts with shopkeepers, for legitimate uses such as security and improvement, and where required by law. Consent is obtained through device / App prompts for permissions such as location, camera, and optional marketing notifications. You may withdraw permission in device settings or (for optional offers) in Profile; transactional messages needed to operate the service may still be sent.
6. Retention
We keep account, order, cancellation, issue, khata, staff-invite, and store records as needed to provide the service, meet legal or accounting needs, resolve disputes, and prevent abuse. After account deletion we remove or anonymize personal identifiers where feasible; some history may remain with a store in anonymized or limited form where required for that store’s records.
7. Your rights and choices
- Access and correct profile and address details in the App
- Delete your account from Profile → Delete account (or email privacy). We remove login and profile data and revoke sessions / device tokens; order and khata records kept for stores are anonymized where needed. Active approved store owners, or stores with order history, must contact us before self-serve deletion. Steps and what we keep are on the delete account page
- Control location, camera, and notification permissions in device settings
- Turn off optional offers / reminders in Profile
- Raise a grievance or data request via privacy@nestorder.in
8. Security
We use reasonable technical and organisational measures, including HTTPS in production and access controls. No method of transmission or storage is completely secure.
9. Children
The App is intended for users aged 18 years or older. We do not knowingly create accounts for children.
10. Cross-border processing
Our servers and service providers may process data in India or other countries. Where data is processed outside India, we rely on appropriate contractual and organisational measures consistent with applicable law.
11. Changes
We may update this Privacy Policy. We will revise the “Last updated” date and, for material changes, notify you in the App or by other reasonable means where required.
12. Contact / grievance
Email: privacy@nestorder.in
The same Privacy Policy is shown inside the NestOrder app.