Auvrai Privacy Policy

Auvrai ("Auvrai", "we", "us") operates auvrai.in and provides a WhatsApp based ordering and business intelligence platform for food businesses in India, including restaurants, cloud kitchens, cafes, bakeries, and tiffin services. Auvrai is a sole proprietorship registered under UDYAM-KL-07-0063890.

This policy explains what personal data we collect, why, how it is used, and the choices available to you. It applies to visitors of auvrai.in, to the food businesses we work with, and to the end customers of those businesses when they interact with them through the Auvrai platform.

Who this policy covers, and in what capacity

Auvrai plays two different roles depending on who you are, and the Digital Personal Data Protection Act, 2023 treats these roles differently.

If you are a visitor to auvrai.in, or a food business we work with or are speaking to, Auvrai is the data fiduciary responsible for the personal data you share with us directly, such as your name, business name, email, and phone number.

If you are a customer of a food business that uses Auvrai, for example ordering a tiffin subscription over WhatsApp, that business is the data fiduciary responsible for your data. Auvrai acts as a data processor, operating the technology on the business's instructions. Questions about how your data is used should go to that business first. Auvrai still applies the security and processing standards described below to that data.

What we collect

From website visitors and business inquiries: name, business name, email address, phone number, and anything you share with us in a message, call, or form.

From client businesses operating the platform: business registration details, payment account information needed to set up Razorpay, and the content of your communications with our team.

Processed on behalf of client businesses, meaning their customers' data: phone number, name, order details, delivery address where applicable, and the content of WhatsApp messages exchanged with the business through the platform.

Why we collect it

• To operate the WhatsApp ordering and business intelligence platform on behalf of client businesses
• To classify and respond to WhatsApp messages using AI language models, so orders and queries are handled quickly and accurately
• To generate business intelligence for client businesses, including settlement adjusted revenue reporting
• To process payments through Razorpay, on a per client basis. Auvrai does not hold client funds
• To communicate with prospective and current client businesses about our services
• To meet legal and tax obligations under Indian law

Who we share data with

We use the following service providers to run the platform. Each processes data only as needed to perform its function.

• Meta, WhatsApp Business Platform: delivers and receives messages
• Anthropic, Claude: classifies and generates message content
• Supabase: hosts the platform database, with row level security separating each client's data
• Razorpay: processes payments, per client business, directly to that business's own account
• Cloudflare: stores files such as menus and receipts
• Railway: hosts the application backend

We do not sell personal data to anyone, for any reason.

How we protect data

Every client business's data is isolated using row level security at the database level. Access credentials and tokens are encrypted. Access to client data is limited to what is needed to operate and support the platform.

How long we keep data

We retain personal data for as long as needed to provide the service, plus any period required by Indian tax, accounting, or other legal requirements. When a client business's relationship with Auvrai ends, we work with them to hand over or delete their data as instructed.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Ask what personal data we hold about you and how it is used
• Ask us to correct inaccurate or incomplete data
• Ask us to erase your data, where Auvrai is the data fiduciary for it
• Withdraw consent, where processing is based on consent
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• File a grievance with us, and escalate to the Data Protection Board of India if unresolved

To exercise any of these rights, or if you are a customer of a client business and want to reach that business directly, write to hello@auvrai.in.

Children's data

Auvrai's platform is intended for use by business owners and their adult customers. We do not knowingly collect data from children.

Cookies and analytics

auvrai.in uses Microsoft Clarity to understand how visitors use the site. This tool can use cookies or similar technology to collect information such as pages viewed and navigation patterns. This data is used only to improve the website and is not used to identify visitors personally. You can control cookies through your browser settings.

Changes to this policy

We may update this policy as our services or legal obligations change. The effective date at the top reflects the latest revision.

Grievance officer and contact