Version 1.0 · Effective date: 15 October 2026 · Last updated: 15 October 2026
This Privacy Policy explains how Kwikza Private Limited ("Kwikza", "we", "us" or "our") collects, uses, shares and protects your personal data when you use the Kwikza website, web app, mobile app, seller dashboard, point-of-sale (POS) tools, KWIKbot, WhatsApp bills and related services (together, the "Platform").
We prepared this Policy in line with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 ("DPDP Law"), the Information Technology Act, 2000 and its rules, and the Consumer Protection (E-Commerce) Rules, 2020.
We have kept it in plain language. A short summary comes first, and the full details follow.
AT A GLANCE
- Who we are: Kwikza Private Limited, Pune. We are the Data Fiduciary for the personal data described here.
- What we collect: what we need to run your orders and your store, such as name, phone, address, location (for delivery), order and payment details, and, for sellers, business and KYC details.
- Why: to deliver your orders, run seller stores, process payments, prevent fraud, give support and meet the law.
- We do not sell your personal data. Ever.
- Shared only when needed: with the seller you order from, delivery partners, payment partners and verification partners, and only for the stated purpose.
- Your rights: access, correct or erase your data, withdraw consent, raise a grievance and nominate someone. Write to grievance@kwikza.com.
- Discovery customers: when you find a store through Kwikza Discovery, your phone number can be masked from the seller.
1. WHO WE ARE AND HOW TO CONTACT US
Kwikza Private Limited CIN: U62011PN2026PTC251379 · DPIIT recognised startup (DIPP264355) Registered office: Flat No. C-105, S. No. 39/24, Windsor County, Ambegaon BK, Haveli, Pune 411046, Maharashtra Office: Office No. 412, 4th Floor, Maruti Millennium Tower, Baner, Pune 411045, Maharashtra
Grievance Officer (privacy and data protection): Mr. Jayesh Kohkade · Email: grievance@kwikza.com · Phone: +91 70588 81716 · Monday to Saturday, 10:00 am to 6:00 pm
General support: support@kwikza.com · WhatsApp +91 70588 83318
2. WHO THIS POLICY APPLIES TO
This Policy applies to:
- (a) Customers: people who browse, order from, or save stores on Kwikza, including people who receive a bill on WhatsApp from a Kwikza store;
- (b) Sellers: shops, restaurants, home kitchens, makers and other businesses that list on Kwikza, and their owners and staff;
- (c) Visitors: anyone who visits our website or contacts us.
3. WHAT PERSONAL DATA WE COLLECT
3.1 Customers
| Data | Examples | Source |
|---|---|---|
| Identity and contact | Name, mobile number, email (if you sign in with Google) | You, or the seller when they bill you at the counter |
| Delivery details | Delivery address, landmark, delivery instructions | You |
| Location | Approximate or precise location, if you allow it, to show stores that deliver to you | Your device (with your permission) |
| Order data | Items ordered, stores, order history, saved stores (My Stores), ratings and reviews | Your use of the Platform |
| Payment data | Payment status, transaction ID and payment method type. We do not store your full card number, CVV or UPI PIN. | Our payment aggregator |
| Uploads | Reference images for custom orders (for example, a cake design) | You |
| Support | Messages, complaints and call records | You |
| Device and usage | IP address, device type, browser, app version, pages viewed, crash logs, cookies | Automatically |
3.2 Sellers (and their staff)
| Data | Examples |
|---|---|
| Identity and contact | Owner and staff names, phone, email |
| Business details | Legal and trade name, address, store location, delivery radius, opening hours |
| KYC and licences | PAN, GSTIN, FSSAI registration or licence, Shop Act or trade licence, Udyam (if any), identity proofs as required |
| Bank details | Account number, IFSC and account holder name, for payouts |
| Store and sales data | Products, prices, inventory, orders, invoices and payout statements |
| POS data (Kwikza Pro) | Counter bills, and customer name and phone where the seller chooses to send WhatsApp bills |
| KWIKbot conversations | Instructions and questions you give KWIKbot in Hindi, Marathi, English or Hinglish |
| Device and usage | As for Customers |
3.3 Data we do not seek
We do not ask for sensitive information such as religion, caste, health conditions, biometric data or political views. Please do not include such information in reviews, chats or uploads.
4. WHY WE USE YOUR PERSONAL DATA (PURPOSES AND LEGAL BASIS)
Under DPDP Law, we process personal data either with your consent or for certain legitimate uses the law allows (Section 7). These include where you voluntarily provide data for a specific purpose, or where processing is needed to comply with law.
| Purpose | Whose data | Basis |
|---|---|---|
| Creating and managing your account and login | Customers, Sellers | Consent; data voluntarily provided |
| Taking, fulfilling and delivering orders; showing order status and live tracking | Customers, Sellers | Data voluntarily provided for the purpose (s.7(a)); consent |
| Showing stores that deliver to your location (Discovery) | Customers | Consent (location permission) |
| Saving stores to My Stores and showing order history | Customers | Consent |
| Sending order updates, bills and receipts (including on WhatsApp) | Customers | Consent; data voluntarily provided |
| Onboarding sellers, verifying identity, KYC and licences | Sellers | Consent; compliance with law |
| Processing payments, refunds, chargebacks and payouts | Customers, Sellers | Data voluntarily provided; compliance with law |
| Tax compliance (GST TCS, income-tax TDS, GST on restaurant services) | Sellers, Customers | Compliance with law |
| Customer support, complaints and grievance handling | All | Consent; compliance with law |
| Fraud prevention, safety and platform security | All | Compliance with law; consent |
| Improving the Platform, fixing errors and service analytics (using aggregated or de-identified data where possible) | All | Consent |
| Marketing messages about offers and new features | All | Separate, optional consent only. You can opt out at any time. |
| Responding to lawful requests from courts and government authorities | All | Compliance with law |
We will not use your personal data for a purpose that is not compatible with these purposes without telling you and, where required, obtaining fresh consent.
5. CONSENT: HOW YOU GIVE IT AND WITHDRAW IT
5.1 Clear consent. We ask for consent through clear, separate actions such as an unticked checkbox or a permission prompt. We never use pre-ticked boxes, and we never bundle marketing consent with the consent needed to use the Platform.
5.2 Withdrawing consent. You can withdraw consent at any time, as easily as you gave it, from your account settings or by writing to grievance@kwikza.com. For example:
- you can turn off location access in your device settings;
- you can opt out of marketing using the "STOP" or unsubscribe option in any message, or from settings.
5.3 Effect of withdrawal. Withdrawal does not affect processing done before it. If you withdraw consent needed to provide a service (for example, your phone number for delivery), we may not be able to provide that service. We will stop processing and delete the data unless the law requires us to keep it.
5.4 Consent Managers. Once Consent Managers registered with the Data Protection Board are available, you may also manage your consent to Kwikza through them.
6. WHO WE SHARE YOUR PERSONAL DATA WITH
We do not sell, rent or trade your personal data. We share it only as needed for the purposes in Section 4, and only with:
| Recipient | What they get | Why |
|---|---|---|
| The seller you order from | Name, order details, delivery address (when they deliver themselves), contact number. For customers who found the store through Kwikza Discovery, the phone number may be masked. | To prepare and fulfil your order |
| Delivery partners (currently Shadowfax and Blitz, or the seller's own delivery person) | Name, pickup and drop address, contact number (may be masked), order reference | To deliver your order |
| Payment aggregator (an RBI-authorised partner) | Payment and transaction details, seller KYC and bank details | To collect payments, issue refunds and settle seller payouts |
| Verification and KYC partners | Seller identity, PAN, GSTIN and licence details | To verify sellers |
| Messaging providers (for example, WhatsApp Business, SMS and email services) | Phone number or email, message content (bills, order updates, OTPs) | To send you bills, OTPs and updates |
| Login provider (Google, if you choose "Continue with Google") | Your Google account authenticates you; we receive your name, email and profile photo | To sign you in |
| Cloud hosting, maps and analytics providers | Data needed to host the Platform, show maps and measure performance | To run the Platform |
| AI service providers (for KWIKbot and menu scanning) | Your instructions to KWIKbot and the images you upload for scanning | To provide AI features |
| Professional advisers (lawyers, auditors, CAs) | As needed | Legal, tax and audit compliance |
| Government, courts and law enforcement | As required by law | Legal compliance |
| A successor business | Relevant data, under the same protections | In case of a merger, acquisition or sale of assets |
Our partners act on our instructions (as Data Processors) under written contracts that require them to protect your data and use it only for the stated purpose.
Sellers' own customers. When a seller bills you at their counter and sends a WhatsApp bill using Kwikza Pro, the seller decides how to use your contact details for their own business. In that case the seller is responsible for its own use of your data, and Kwikza processes the data on the seller's behalf. Our Seller Terms require sellers to use customer data lawfully and only with your consent.
7. WHERE YOUR DATA IS STORED (CROSS-BORDER TRANSFER)
Your data is stored on secure cloud servers in India and Singapore. Some service providers (for example, messaging, AI or Google sign-in) may process data outside India. Any such transfer happens only as permitted under DPDP Law, never to a country the Government of India has restricted, and with appropriate safeguards.
8. HOW LONG WE KEEP YOUR DATA
We keep personal data only as long as needed for the purposes in this Policy, or as long as the law requires:
| Data | Retention |
|---|---|
| Account data | While your account is active. Deleted within 90 days of account closure unless needed below. |
| Order and transaction records, invoices, tax data | As required by GST and income-tax laws, generally 8 years from the end of the relevant financial year |
| Seller KYC and payout records | As required by tax, payment and anti-money-laundering rules |
| Security logs and traffic data | At least 1 year, as required by DPDP Rules and CERT-In directions |
| Support and grievance records | 3 years from closure, for dispute handling |
| Marketing consent records | Until you withdraw consent, plus the period needed to prove consent |
| Data under a legal hold (for example, an ongoing dispute or investigation) | Until the matter is resolved |
When data is no longer needed, we delete it or anonymise it so it can no longer identify you.
9. HOW WE PROTECT YOUR DATA
We use reasonable security safeguards, including:
- Encryption of data in transit (HTTPS/TLS) and protection of stored data;
- Access control: only authorised staff who need data for their work can access it, and access is logged;
- Masking of customer phone numbers for Discovery orders, where enabled;
- Payment security: card and UPI details are handled by our RBI-authorised payment aggregator, not stored by Kwikza;
- Monitoring, logging and backups to detect and recover from incidents;
- Contracts with partners requiring equivalent protection.
No system is completely secure. Please protect your login and OTPs, and never share them with anyone, including people claiming to be from Kwikza.
10. IF THERE IS A DATA BREACH
If a personal data breach occurs, we will:
- act immediately to contain it;
- inform affected users without delay, explaining what happened, the likely impact, what we are doing and what you can do;
- report it to the Data Protection Board of India, with a detailed report within 72 hours, as required by DPDP Law;
- report cyber incidents to CERT-In as required.
11. YOUR RIGHTS
Under DPDP Law you have the right to:
- Access: get a summary of the personal data we hold about you, how we process it, and who we have shared it with.
- Correction and updating: correct inaccurate or incomplete data, or update it.
- Erasure: ask us to erase your data, unless the law requires us to keep it.
- Withdraw consent: at any time (Section 5).
- Grievance redressal: complain to us and get a response.
- Nominate: nominate another person to exercise your rights if you die or become incapable.
How to exercise your rights: use the options in your account settings, or email grievance@kwikza.com from your registered email or phone, with the subject "Data Rights Request". We may verify your identity before acting. We will acknowledge your request within 48 hours and respond within the time required by law, and in any case within 30 days.
If you are not satisfied with our response, you may complain to the Data Protection Board of India under DPDP Law, after first using our grievance process.
Your duties under DPDP Law: please give accurate information, do not impersonate anyone, and do not file false or frivolous complaints.
12. CHILDREN
Kwikza is meant for people aged 18 and above. We do not knowingly collect personal data of children (under 18) without verifiable consent of a parent or lawful guardian, as required by DPDP Law. We do not track or show targeted advertising to children. If you believe a child has given us personal data without such consent, write to grievance@kwikza.com and we will delete it.
13. COOKIES AND SIMILAR TECHNOLOGIES
We use:
- Essential cookies and local storage to keep you logged in, remember your cart, saved stores and preferences, and keep the Platform secure. These are needed for the Platform to work;
- Analytics cookies to understand how the Platform is used and improve it, where you allow them.
You can control cookies through your browser settings. Blocking essential cookies may stop parts of the Platform from working. We do not use cookies to sell your data.
14. KWIKBOT AND AI FEATURES
KWIKbot and our AI menu and stock scanning process the instructions and images you provide in order to complete the task you ask for, such as adding menu items or changing store settings. KWIKbot asks for confirmation before making changes. Please do not share other people's personal data, passwords or payment details with KWIKbot. AI-generated suggestions may be imperfect, so please check them before relying on them.
15. THIRD-PARTY LINKS AND SERVICES
The Platform may link to third-party websites or services (for example, Google, WhatsApp or payment pages). Their own privacy policies apply, and we are not responsible for their practices.
16. CHANGES TO THIS POLICY
We may update this Policy from time to time. We will post the updated version with a new "Last updated" date. For material changes, we will notify you by email, SMS, WhatsApp or an in-app notice and, where required by law, ask for fresh consent.
17. LANGUAGE
This Policy may be made available in Hindi, Marathi and other languages listed in the Eighth Schedule to the Constitution of India. If there is any inconsistency, the English version prevails.
Kwikza Private Limited · CIN U62011PN2026PTC251379 · DPIIT DIPP264355 · Pune, Maharashtra Questions or requests: grievance@kwikza.com · +91 70588 81716