Legal

Privacy Policy — Rasoyo

How Rasoyo collects, uses, stores, and protects your personal data. DPDP Act 2023 compliant. Data control rights and contact details.

1. What we collect

Name, phone, email, event details (type, date, city, guest count, budget, cuisine preference), payment information, and communications with us and with caterers on the platform.

2. How we use it

To match you with caterers, process bookings, send reminders, provide customer support, resolve disputes, generate invoices, and improve the platform. We do not sell your data.

3. Who we share it with

Shortlisted caterers receive your name, event details, and contact information when you express interest. Payment processors (Razorpay, Cashfree), GST filing providers, and SMS/email vendors receive the minimum data required. Law enforcement on valid legal request.

4. DPDP Act compliance

Rasoyo complies with India's Digital Personal Data Protection Act 2023. You have rights to access, correct, erase, and withdraw consent. Contact dpo@rasoyo.com.

5. Retention

Booking data: 7 years (GST requirement). Marketing data: until you opt out. Dispute records: 3 years post-resolution.

6. Security

AES-256 encryption at rest. TLS 1.3 in transit. Access logged and audited. Payments are never stored on Rasoyo servers.

7. Cookies

Essential cookies for session management; analytics cookies (opt-in); no advertising cookies. Granular consent via cookie banner.

Questions? Contact us.

Find your caterer