Tablesense · Legal

Privacy Policy

Last updated 24 September 2026. This page applies to Tablesense, Indore, India.

Tablesense is ordering, billing and customer software for cafés and restaurants in India. This policy explains what information we hold, why we hold it, who it is shared with, and what you can ask us to do with it. It is written to be read, not to be survived.

1. Two different roles, and why it matters

We handle two kinds of information, and our duties differ for each.

• Information about the café and its staff. When a café signs up, we decide what is collected and why. Under India's Digital Personal Data Protection Act, 2023, we are the data fiduciary for this information.
• Information about the café's own guests. Names, phone numbers and order history belong to the café. We hold and process them only to run the service on the café's instructions. The café is the data fiduciary, and we are its data processor. We never use one café's guest list for our own purposes, and we never share it with another café.

2. What we collect

From the café

• Account details: café name, owner name, email address, WhatsApp number, city and address.
• Business details you enter for bills: brand name, GSTIN, FSSAI number, address, bill header and footer.
• Staff logins created for the dashboard, the kitchen screen and the counter.
• Menu, prices, recipes, stock and purchase records that you enter.
• Payment records for your own subscription.

From the café's guests

• WhatsApp number, and name when the guest gives one.
• Car number for a car order, when the guest gives one.
• Orders, bills, payment method and visit history at that café.
• The messages exchanged with the café on WhatsApp for the purpose of taking and serving the order.
• A star rating and any written feedback the guest chooses to give after a meal.

Automatically

• Log data such as IP address, browser and device type, and the pages or screens used.
• On our marketing pages only, advertising and analytics identifiers described in section 8.

3. What we do not collect

• No card numbers and no bank details of guests. Guests pay the café directly by UPI, card or cash. Tablesense does not process, route or store those payments.
• No Aadhaar, PAN, biometric or health information.
• No continuous location tracking of anyone.
• We do not buy contact lists, and we do not sell yours.

4. Why we use it

• To run the service: take orders, print kitchen tickets, produce bills, and show the café its own numbers.
• To send the messages the service exists to send: order confirmations, bills, and review requests, on WhatsApp.
• To give support when you write to us, and to investigate a problem you report.
• To bill the café for its subscription and to meet our tax obligations.
• To keep the service secure, to detect abuse, and to enforce our terms.
• To improve the product, using aggregated figures that do not identify any individual.

5. WhatsApp messages

Messages are delivered over Meta's WhatsApp Business Platform through our messaging provider. Meta processes those messages to deliver them, under its own terms and privacy policy. A guest who does not want further messages can say so in the chat, and the café can also stop them from the dashboard. Marketing messages are only ever sent where the guest has agreed to receive them.

6. Who we share information with

We share only what is needed for the service to work, and only with these categories of provider:

• Cloud database and file storage, where accounts, menus, orders, bills and bill PDFs are kept.
• Our WhatsApp messaging provider and Meta, to deliver messages.
• Website and application hosting.
• An email provider, where we send you an email such as a login or an invoice.
• Professional advisers, such as an accountant, where they need it and are bound to keep it confidential.

We also disclose information where the law requires it, or to establish or defend a legal claim. We do not sell personal data, and we do not share it for another company's advertising.

7. Where it is stored, and for how long

Information is stored with our infrastructure providers, whose data centres may be located outside India. Where that happens, the transfer is made under the contractual protections those providers offer and is permitted by Indian law.

We keep information for as long as the café's account is active. Order and bill records are kept while the account is active because the café needs them for its own tax and accounting duties. When an account closes, we keep the data for ninety days so it can be restored if the café comes back, then delete or anonymise it, except where a law requires us to keep a record for longer.

8. Cookies and similar technology

• In the dashboard, we use storage on your own device to keep you signed in and to remember your settings. The service cannot work without it.
• On our marketing pages, we may use the Meta advertising pixel to measure whether an advert led to a signup. It sets a cookie and shares a hashed, unreadable form of your email address or phone number with Meta for that measurement. You can turn this off in your browser or through your Meta ad settings.
• The guest ordering page carries no advertising or analytics trackers at all.

9. Security

Traffic is encrypted in transit. Passwords are stored as one-way hashes by our authentication provider and are never visible to us. Access to production data is limited to the people who need it to run the service. No system is perfect, so if a breach ever affects your information we will tell you and the Data Protection Board of India as the law requires.

10. Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data of yours we hold and who it has been shared with,
• correct anything inaccurate or incomplete,
• delete data we no longer need,
• withdraw a consent you gave, which stops future processing that relied on it,
• nominate somebody to exercise these rights if you die or become unable to.

Write to support@tablesense.in and we will answer within thirty days. If you are a guest of a café, ask the café first, because your information belongs to them. If they cannot help, write to us and we will act on their instruction.

11. Grievances

If something about your data has gone wrong, our grievance officer will answer you. Write to support@tablesense.in with "Grievance" in the subject line, and we will acknowledge within forty eight hours and resolve within thirty days. If you are not satisfied, you may complain to the Data Protection Board of India.

12. Children

Tablesense is business software and is not meant for anyone under eighteen. We do not knowingly collect information about children. If you believe we have, tell us and we will delete it.

13. Changes

If we change this policy we will update the date at the top, and for a change that materially affects you we will tell you on WhatsApp or by email before it takes effect.