Privacy Policy — GalliBite Vendor App

Last Updated: April 26, 2026

1. Introduction

GalliBite (“we”, “our”, or “us”) operates a hyperlocal food delivery platform connecting customers, vendors, and delivery partners.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the GalliBite Vendor mobile application (“App”).

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

Company Details:
GalliBite
1023 Vasundhara Sector 1, Ghaziabad, Uttar Pradesh, India – 201012
Email: gallibite0@gmail.com

2. Scope

This Privacy Policy applies to all vendors (restaurant owners, shop owners) using the GalliBite Vendor App and covers how we process personal and business-related data required to provide our services.

3. Information We Collect

3.1 Personal Information

We may collect the following information:

• Phone Number (required for authentication using WhatsApp OTP)

• Owner Name

• Email Address (optional)

3.2 Business Information

We may collect:

• Shop Name

• Shop Address

• Business Category

• Menu and pricing details

3.3 Identity & Verification Documents

To verify vendor authenticity and comply with platform requirements, we may collect:

• PAN Card (Photo)

• Aadhaar Card (Front and Back Images)

• Shop License / Business License (Photo)

These documents are collected strictly for identity verification, fraud prevention, and regulatory compliance.

3.4 Optional Information

We may collect optional details such as:

• Gender

• Date of Birth (DOB)

This information is used only for profile completeness and internal purposes.

3.5 Order & Financial Data

We collect:

• Order details and history

• Customer interactions

• Earnings and commission details

• Payout information

3.6 Device and Technical Information

We may collect limited technical information such as:

• Device type and model

• Operating system version

• App version

• IP address

This data may be collected automatically and is used for security, fraud prevention, and performance optimization.

3.7 Location Information

We may collect and use your device location information to improve platform functionality and service availability.

For vendor accounts, location data may be used to:

• Determine shop service availability

• Display shops to nearby customers within the service radius

• Improve delivery and operational efficiency

Location access is only used while the App is actively in use and is not used for continuous background tracking.

Users may choose to deny location permission; however, some location-based features may not function properly.

4. How We Use Your Information

We use your information to:

• Authenticate vendors via WhatsApp OTP (MSG91)

• Verify business and identity documents

• Enable vendor onboarding and listing

• Manage orders and customer interactions

• Display shops to customers within nearby service areas

• Calculate earnings and commissions

• Process payouts

• Improve platform performance

• Prevent fraud and misuse

• Comply with legal obligations

5. Permissions Used

The App may request the following permissions:

• Internet Access — Required for app functionality and server communication

• Notifications — To send order alerts, updates, and platform communications

• Camera — To capture and upload identity/business verification documents and menu item photos

• Storage / Media Access — To upload photos from the device gallery

• Location — Used to determine shop availability, nearby customer visibility, and service radius functionality. Location access is only used while the App is actively in use.

Permissions are requested only when required by the feature being accessed.

6. Document Data Usage

Identity and business documents are collected strictly for:

• Vendor identity verification

• Fraud prevention

• Platform trust and safety

• Legal and regulatory compliance

Storage and Access Controls

• Documents are stored securely using Supabase

• Access is restricted to authorized personnel only

• Documents are not shared with customers or riders

• Documents are not used for advertising or profiling

Retention

Verification documents are retained during active vendor engagement and deleted within 30 days of account deletion unless retention is legally required.

7. Sharing of Information

We do not sell, rent, or trade your personal data.

7.1 Customers

Shop name, menu, category, pricing, and public listing information may be visible to customers.

Personal owner details are not shared publicly.

7.2 Delivery Partners

Order details and shop address may be shared with delivery partners for order fulfillment.

7.3 Service Providers

We use trusted third-party providers including:

• Supabase — backend infrastructure and secure storage

• MSG91 — WhatsApp OTP authentication

• Razorpay — payment processing

These providers process data only for the services they provide.

7.4 Legal Authorities

We may disclose information when required by law or regulatory authorities.

8. Data Retention

We retain data only as long as necessary for operational, legal, and compliance purposes.

• Account data: deleted within 30 days of account deletion

• Verification documents: deleted within 30 days of account deletion

• Order and financial history: retained for up to 3 years

• Device and technical data: retained for up to 90 days

• Optional profile data: deleted upon account deletion

In-App Account Deletion

Users may delete their account within the App:

Profile → Settings → Delete Account

Data will be permanently deleted within 30 days, except where legal retention obligations apply.

Deletion requests may also be sent to: gallibite0@gmail.com

9. Data Security

We implement reasonable security measures including:

• Secure storage

• HTTPS encryption

• Role-based access control

• OTP authentication

However, no method of transmission or storage is completely secure.

10. User Rights

Users may:

• Access their personal data

• Request corrections

• Delete their account

• Withdraw consent where applicable

• Request data portability

Requests will be acknowledged within 24 hours and resolved within 30 days.

11. Children’s Privacy

The GalliBite Vendor App is not intended for individuals under 18 years of age.

We do not knowingly collect data from minors.

12. Third-Party Services

The App integrates with third-party services including MSG91 and Razorpay, which operate under their own privacy policies.

13. Data Transfers

Your data may be processed and stored on secure servers.

By using the App, you consent to such processing.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Changes will be reflected by updating the “Last Updated” date.

15. Consent

By using the GalliBite Vendor App, you consent to:

• Collection and use of your information as described

• WhatsApp OTP-based authentication

• Submission and processing of verification documents

• Use of location information for nearby service functionality

16. Grievance Officer

As required under applicable Indian laws:

Grievance Officer: Vinit Kumar
Email: gallibite0@gmail.com
Address: 1023 Vasundhara Sector 1, Ghaziabad, Uttar Pradesh, India – 201012

Grievances will be acknowledged within 24 hours and resolved within 15 days.

17. Contact Information

Email: gallibite0@gmail.com
Address: 1023 Vasundhara Sector 1, Ghaziabad, Uttar Pradesh, India – 201012