Skip to content
Banega

Privacy policy

Last updated 6 October 2026. Written to be read. If anything is unclear, write to us.

Draft. This page is being reviewed by our lawyer before reservations open. The substance won't change; the wording might.

[Company legal name] (“Banega”) is the data fiduciary for the personal data described here. This policy is written to meet the Digital Personal Data Protection Act, 2023 and the Rules made under it.

What we collect, and why

  • Account: name, email, and which sign-in you used (Google or email link). To run your account.
  • Reservation: what you pre-ordered, the amount, delivery name, phone and address, and how you heard about it. To process the pre-order and deliver it.
  • Mandate and payment status: whether the bank confirmed the mandate and whether each debit succeeded. Your bank, card and UPI details go to Razorpay, not to us.
  • Where you came from: the tagged link or website that brought you to a campaign. So makers know what worked.
  • WhatsApp number, only if you opt in. To send reservation messages.
  • Approximate location, only if you tap “Share my location” and allow it in your browser. Rounded to about 1 km. To show makers near you and plan delivery.
  • Makers: legal name, PAN (encrypted), GSTIN, address and phone. To verify who's selling. We never collect Aadhaar numbers.
  • Security logs: hashed IP addresses and sign-in events. To stop abuse.

Consent

We ask with a clear action and never pre-tick a box. Every consent and withdrawal is recorded with its date. You can withdraw any of them as easily as you gave it, from your profile or the cookie settings link in the footer.

Who we share it with

  • The maker of a campaign you reserve: a shortened name and city while it's live; your delivery details once it's funded and your payment is collected.
  • Processors who work for us under contract: Razorpay (payments), Neon (database), Vercel (hosting), Resend (email), Meta (WhatsApp messages, if you opt in), Cloudflare (bot checks).
  • Authorities, when the law requires it.

We don't sell personal data and we don't use advertising trackers.

How long we keep it

  • Unconfirmed waitlist and newsletter sign-ups: 30 days.
  • Message logs: 90 days. Contact messages: 1 year.
  • Reservation and payment records: 8 years, as tax law requires, without your name if you delete your account.
  • Everything else: until you delete your account.

Your rights

You can see, correct, download and delete your data. Most of it is in your profile, including “Download my data” and “Delete my account”. For anything else, or to nominate someone to act for you, write to grievance@banega.in. We reply within 30 days.

Security

Data is encrypted in transit and at rest. PAN and payment-account tokens are encrypted again at field level. Access is limited to the people who need it, and admin actions are logged.

If something goes wrong

If a breach affects your data, we tell you and the Data Protection Board of India without delay, as the law requires.

Children

You need to be 18 or older to reserve. We don't knowingly collect data from children.

Grievance officer

[Grievance Officer name], grievance@banega.in, [+91 phone], [Registered address].