Privacy Policy

From Vendors

• Legal business name, trade name, and registered address
• GSTIN and PAN (for invoicing and tax compliance)
• Authorised signatory name, mobile number, and email address
• Outlet type, number of tables, and selected subscription plan
• Menu items, pricing, images, and offers uploaded to the Platform
• Order transaction records generated through the Platform
• Platform usage and analytics data (login activity, feature usage, order volumes)

From End Customers

GoSip is designed with a privacy-first approach for End Customers. No registration, login, or personal information is required to browse menus or place orders. We do not collect End Customer payment details, phone numbers, or email addresses by design.

• Table identifier (table slug) — used for order routing only
• Order items and special instructions (if typed by the customer)
• Device type and browser information (standard server logs)

Technical Data (Automatically Collected)

• IP addresses (logged by cloud infrastructure)
• Browser and device type
• Access timestamps and session duration
• Session cookies for authentication (no tracking cookies)

• Delivering and improving the GoSip Platform services
• Processing Vendor subscriptions and issuing GST invoices
• Routing orders to kitchen display systems in real time
• Providing Vendors with revenue analytics and operational insights
• Communicating service updates, maintenance notifications, and support
• Complying with applicable legal obligations
• Detecting and preventing fraud, abuse, and unauthorised access

We do not sell, rent, or trade any personal data. Limited sharing occurs only in these circumstances:

The GoSip Platform uses cloud infrastructure hosted internationally (Supabase and AWS), which may include servers outside India. By using the Platform, Vendors consent to the transfer and processing of their data in these jurisdictions for service delivery purposes.

Viruzverse monitors developments under the DPDP Act, 2023 regarding cross-border data transfer restrictions and will update practices accordingly when relevant provisions are notified.

• Row-Level Security (RLS) enforced at the database layer (Supabase PostgreSQL)
• JWT-based authentication with role separation for Vendor admin and kitchen staff
• Data encrypted in transit (TLS 1.2+) and at rest
• Access logs maintained and reviewed periodically
• No plain-text storage of passwords or payment credentials

Subject to applicable law, Vendors as Data Principals have the following rights:

To exercise these rights, contact legal@viruzverse.in. We will respond within 15 business days.

The GoSip web interface uses minimal session cookies strictly necessary for authentication and order routing. No third-party advertising or tracking cookies are deployed. End Customers may configure their browsers to block cookies; this will not affect menu browsing but may affect order submission.

The GoSip Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, contact legal@viruzverse.in immediately.

Viruzverse may update this Privacy Policy periodically. Vendors will be notified of material changes via email or platform notification at least 15 days in advance. Continued use of the Platform following the effective date of the revised Policy constitutes acceptance.