Privacy Policy

1. Who controls your personal data

VagharBox is operated by Hirpara Vinay Bavchandbhai, 52, Devajinagar-2, near Bhavani Circle, A.K. Road, Varachha, Surat, Gujarat 395006, India (FSSAI Registration No. 20726031005466). For privacy questions or requests, email vagharbox@gmail.com.

2. Personal data we collect

3. How and why we use personal data

• Authenticate users and maintain their account session.
• Create, prepare, deliver, track and support food orders.
• Verify online payment signatures and prevent fraud or duplicate orders.
• Send transactional updates through the website, app, phone, email, push notification or WhatsApp where appropriate.
• Respond to complaints, refunds, safety incidents and legal requests.
• Maintain accounting, tax, fraud-prevention and other legally required records.
• Measure website performance and improve menus, delivery and customer experience.

Where processing is based on consent, consent may be withdrawn. Withdrawal does not affect processing already lawfully completed or records we must retain by law. Some essential data is required to fulfil an order and the service may not work without it.

4. When data is shared

We do not sell personal data. We disclose limited data only where needed to provide or protect the service, including:

• Google and Firebase: Google Sign-In, authentication, database, hosting, cloud functions, notifications and platform security.
• Razorpay and payment partners: payment processing, verification, fraud checks, refunds and settlement.
• Google Maps/location services: address suggestions, geocoding, serviceability and delivery navigation.
• WhatsApp/Meta: only when you open WhatsApp support/order links or choose WhatsApp communication.
• Delivery and support personnel: name, phone, address, order and instructions required to fulfil or support an order.
• Authorities or advisers: where required by law, court order, food-safety obligations, fraud investigation or protection of legal rights.

These providers may process data under their own privacy terms. Data may be processed on servers located outside your state or India, subject to applicable legal safeguards and provider controls.

5. Payment information

Razorpay Checkout collects and processes sensitive payment credentials. VagharBox does not receive or store your full card number, CVV, UPI PIN or bank password. We receive transaction identifiers and status needed to verify the payment and support the order.

6. Data retention and security

Account and saved-delivery information is kept while your account remains active or until deletion is requested, unless retention is required for an unresolved order, complaint, fraud investigation or legal obligation. Order, payment, invoice and complaint records may be retained for accounting, tax, consumer-protection and legal requirements.

We use access controls, encrypted network connections, Firebase security controls, server-side payment verification and restricted administrative access. No electronic system is completely secure, but we take reasonable technical and organisational steps appropriate to the data and service.

7. Your choices and rights

You may ask VagharBox to:

• Provide information about personal data associated with you.
• Correct inaccurate or incomplete account, contact or delivery data.
• Delete personal data that is no longer required, subject to legal retention duties.
• Delete your account entirely — from the app (Profile → Delete Account) or by request. See Delete Your Account for the full steps.
• Withdraw consent for optional processing or marketing communication.
• Resolve a privacy grievance and explain our response.

Send the request from your registered email or include enough information to verify the account. We may request reasonable identity verification before acting. You can also revoke Google account access through your Google Account settings.

8. Children and policy updates

VagharBox does not knowingly permit a person under 18 to create and operate an account independently. A parent or legal guardian should supervise ordering and provide any required consent.

We may update this Policy when services, providers or laws change. The revised date will be shown above. Material changes may also be communicated through the website, app or account contact channel.

9. Privacy and grievance contact