Privacy Policy

Last updated: 8/23/2026

At ZestCampus, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, and safeguard your information.

1. Information We Collect

• Personal Details: Name, Roll Number, Section, and College/School details.
• Contact Information: Email address used for registration.
• Usage Data: Order history, favorite items, and platform interaction logs.

2. How We Use Your Information

We use the collected information for various purposes:

• To process your food orders and facilitate smooth pickups.
• To manage your account and wallet balances.
• To improve the canteen services and platform experience.
• To send important notifications regarding your orders.

3. Data Security

We implement high-level security measures, including secure authentication (via Google/Supabase) and encrypted database storage, to protect your data from unauthorized access or disclosure.

4. Third-Party Processors

We do not sell, trade, or rent your personal identification information to others. We share the minimum necessary data with the following processors solely to operate the platform:

• Razorpay: processes payment and wallet top-up transactions. We never store your full card, UPI, or bank details ourselves.
• Supabase: hosts our database and handles authentication.
• Google Gemini: powers the in-app chat assistant; messages you send it are processed to generate a reply and are not used to identify you elsewhere.

Canteen administrators and kitchen staff can access order details strictly for the purpose of preparing and fulfilling your orders.

5. Data Retention

We retain your account, order, and wallet transaction data for as long as your account remains active, and for a reasonable period afterward to comply with tax, accounting, and fraud-prevention obligations. If you delete your account, your personal profile data is removed; order/payment records required for financial record-keeping may be retained in anonymized or aggregated form.

6. Children's Privacy

ZestCampus is intended for university students, faculty, and staff. It is not directed at children under 18. If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will delete it promptly.

7. Data Breach Notification

In the unlikely event of a personal data breach that is likely to affect you, we will notify affected users and the relevant authorities as required under the Digital Personal Data Protection Act, 2023, without undue delay.

8. Your Rights & Data Grievances

You may request access to, correction of, or erasure of your personal data at any time from your Profile page, or by contacting our Data Grievance contact below. We will respond to verified requests within a reasonable timeframe as required by applicable data protection law.

• Data Grievance Contact: matrixsharma1999@gmail.com