1. Who we are
Rozaana ("we", "us") is operated by Rujal Innovation Services Private Limited (under incorporation), India. We are the data fiduciary for the information described in this policy under India's Digital Personal Data Protection Act, 2023. Contact: hello@rozaana.app.
2. Scope
This policy covers the Rozaana website at rozaana.app, the Rozaana web and mobile application at app.rozaana.app, the WhatsApp messages sent and received on its behalf, and any data we hold for a restaurant that uses it.
3. Information we collect
Provided by you or your team: restaurant name and district; the phone numbers that receive reports; the email address and password of each user; team members' names, roles and, where entered, pay; daily sales figures; cashier collections; supplier bills (the photograph and the line items read from it); stock counts; petty cash and expense entries; messages you send us on WhatsApp.
Collected automatically: the date and time of each entry, message and login; the device and browser type; standard server logs.
From third parties: if you connect a POS such as Petpooja, the daily sales report, pulled with the credentials you provide.
Your team's data: when you enter a team member's name, role or pay, or invite them to log in, you are responsible for telling them that Rozaana holds it, and we process it on your instructions. A team member with a login may write to us directly about their own data.
4. How we use it
To compute and send your daily and monthly figures; to let your team record collections, bills, stock and expenses; to keep an audit trail of corrections; to send you the WhatsApp messages you have opted into; to keep the service running and secure. We do not use your data for advertising, do not sell it, and do not use it to train machine-learning models.
5. Legal basis
We process your data on your consent, given when you register and when you opt into WhatsApp messages, and to perform the service you have asked for. You may withdraw consent at any time by writing to us; the service cannot operate without the data it needs.
6. Who we share it with
We share data only with the service providers that run Rozaana, each bound to process it on our instructions and for no purpose of their own: a database and file-storage provider in Mumbai, India; an application-hosting provider in Singapore; a web-hosting provider; a processing provider that helps read uploaded photographs and does not retain them for its own purposes; Meta, for the delivery of WhatsApp messages; and a monitoring service that receives a signal that scheduled messages were sent, containing no names or figures. We may also disclose data where the law requires it. No other restaurant, and no one outside your own team, can see your data.
7. Access within your restaurant
Access is by role. Owners see all of the restaurant's data. Staff see only what their duties require — a cashier sees collections, the store sees stock — and never profit, cost or pay figures. Every record is isolated to your restaurant at the database level.
8. International transfers
Your data is stored in India. It is processed on a server in Singapore, and bill photographs and WhatsApp messages pass through our processing provider's and Meta's systems, which may be outside India. These transfers are made to provide the service and are protected by the providers' contractual commitments.
9. Retention
We keep your data for as long as your restaurant uses Rozaana. When you leave, write to hello@rozaana.app: we will offer you an export first, then delete your restaurant's data within 30 days of your request.
10. Security
Data travels between your device and our servers over HTTPS. Access to the database is restricted by per-restaurant policies enforced by the database itself. Bill photographs are served only through short-lived signed links. Passwords are stored only as salted hashes; we cannot read them. If a breach of your personal data occurs, we will inform you and the Data Protection Board of India as the Act requires.
11. Your rights
Under the DPDP Act you may: access the data we hold about you; have inaccurate data corrected; have your data erased; withdraw consent; nominate a person to exercise these rights on your behalf; and raise a grievance. Write to hello@rozaana.app. We respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
12. Cookies and local storage
The web application stores your login in your browser's local storage so you are not asked to sign in on every visit. We do not use advertising or tracking cookies.
13. Children
Rozaana is a business tool and is not intended for anyone under 18.
14. Changes to this policy
We will post any change on this page with a new date. Material changes will also be notified to the restaurant's registered contact.
15. Grievance officer
Rakshhit Bhimani, Rujal Innovation Services Private Limited (under incorporation). Email: rakshhit@rozaana.app.