Privacy Policy

Last updated: October 2026

1. Introduction & Who We Are

TATTVA AI PVT. LTD. ("BazaarSe", "we", "us") is the Data Fiduciary for the personal data it processes through our website www.bazaarse.in and the BazaarSe mobile applications. This Privacy Policy explains how we collect, use, share, retain and protect your personal data, and the rights you have as a Data Principal under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.

Registered operator: TATTVA AI PVT. LTD. (CIN: U47912OD2025PTC048594 · GSTIN: 21AALCT7239C1ZH), Power House Road, Sarbahal, Jharsuguda, Odisha — 768201, India. By using our platform you acknowledge this Policy; where the law requires consent, we collect it as described in Section 4.

This Policy covers customers/consumers. If you are a merchant, vendor, delivery partner or other business partner, please also read our Merchant & Partner Privacy Policy.

2. Personal Data We Collect

We collect only the data needed for the purposes in Section 3:

  • •Identity & contact: name, mobile number, email, and delivery/billing address.
  • •Account & transaction: order history, cart, preferences, ratings/reviews, wallet balance, coupons.
  • •Payment: payment status and references. Card/UPI credentials are handled by our PCI-compliant payment partners — we do not store full card numbers.
  • •Location: delivery address and, with your permission, approximate/precise device location to show nearby outlets and enable delivery.
  • •Technical & usage: IP address, device and browser type, app version, pages/screens viewed, and interaction patterns.

We do not knowingly collect personal data from children under 18 except through a verifiable parent/guardian (see Section 8).

3. Purposes & Legal Basis

We process your data for these specified purposes, each on the basis of your consent or a legitimate use permitted by the DPDP Act (such as performing a service you requested):

  • •Create and manage your account and process/fulfil your orders
  • •Enable delivery, pickup and dine-in, and show nearby outlets
  • •Process payments, refunds and settlements, and issue invoices
  • •Provide customer support and respond to your requests
  • •Improve and secure our platform, and detect and prevent fraud
  • •Send marketing communications only with your consent, which you can withdraw anytime
  • •Comply with legal, tax and regulatory obligations

We use your data only for the purpose it was collected for, or a purpose you would reasonably expect, in line with the principle of purpose limitation.

4. Consent & How to Withdraw It

Where we rely on consent, we ask for it through a clear notice at the point of collection, in plain language. Your consent is free, specific, informed and may be withdrawn at any time.

  • •Withdraw consent or change permissions in the app settings, or by emailing our Grievance Officer (Section 11).
  • •Withdrawing consent is as easy as giving it. On withdrawal we stop the relevant processing, though it will not affect processing already carried out.
  • •Some processing is necessary to provide the service (e.g. fulfilling an order); withdrawing consent for it may mean we can no longer offer that service.

5. Sharing & Disclosure

We do not sell your personal data. We share it only as needed, and our Data Processors are bound by contract to protect it and use it only on our instructions:

  • •Merchants / outlets fulfilling your order, and delivery partners for delivery.
  • •Payment gateways and financial partners to process payments and refunds.
  • •Technology service providers (cloud hosting, communications, analytics) acting as processors.
  • •Authorities where required by law, or to protect rights, safety and prevent fraud.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law. When you delete your account we erase your data after a short cooling-off period, except records we must retain for legal/tax reasons:

  • •Transaction & invoice/billing records — up to 7 years (financial, tax & GST law)
  • •Fraud & dispute records — up to 5 years

See our Account Deletion page for the full process and retention table.

7. Your Rights as a Data Principal

Under the DPDP Act you have the right to:

  • •Access a summary of the personal data we process about you and how we process it.
  • •Correct, complete or update inaccurate or incomplete data.
  • •Erase your data where it is no longer needed and no law requires us to keep it.
  • •Withdraw consent at any time (Section 4).
  • •Grievance redressal — a readily available means to raise and resolve concerns (Section 11).
  • •Nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any right, contact our Grievance Officer (Section 11). We may need to verify your identity, and we will respond within the timelines prescribed by law.

8. Children's Data

Our services are intended for users 18 and older. We do not knowingly process the personal data of a child (under 18) without verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has provided us data without such consent, contact our Grievance Officer and we will delete it.

9. Cookies & Similar Technologies

We use cookies and similar identifiers for security and authentication, to keep you signed in, and to improve and personalise your experience. You can disable cookies in your browser settings, though some features may not work properly.

10. Data Security & Breach Notification

We implement reasonable security safeguards — including encryption in transit, access controls and regular reviews — to protect your data against unauthorised access, loss or misuse. No system is perfectly secure, but in the event of a personal data breach we will notify the Data Protection Board of India and affected Data Principals as required by the DPDP Act.

Our website and app may link to third-party sites we do not control; please review their privacy policies before sharing data.

11. Grievance Officer & Contact

For any question, request to exercise your rights, or complaint about how we handle your personal data, contact our Grievance Officer:

We aim to acknowledge grievances promptly and resolve them within the timelines prescribed by law. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

12. Changes to this Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide a prominent notice. Please review it periodically.