Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us when using our website or services:

• Contact Information: Name, email address, phone number, and business details.
• Authentication Data: Mobile phone numbers collected for OTP verification via WhatsApp or SMS.
• Usage Data: Device info, IP address, browser type, and analytics data collected via Meta Pixel and privacy-respecting analytics tools.

2. How We Use Your Information

Your data is processed strictly for legitimate business operations:

• Delivering requested services, brand audits, and consultation requests.
• Verifying user identity via WhatsApp OTP or SMS passcodes.
• Improving website security, performance, and user experience.
• Communicating customer support updates directly requested by you.

3. Meta & WhatsApp Messaging Compliance

Our integration with Meta platforms (WhatsApp API, Meta Pixel) complies with Meta’s Developer & Business Terms:

• No Unsolicited Marketing: WhatsApp messages are limited to transactional OTP verification and alerts.
• Explicit Consent: Phone numbers are processed for messaging only after affirmative opt-in by the user.
• No Data Sale: Mobile phone numbers and personal data are never sold, rented, or shared with third parties for promotional purposes.

4. ChatGPT Plugin (CrumbPass)

Our loyalty product, CrumbPass, offers a plugin that lets restaurant owners manage their menu from ChatGPT. When you connect it:

• What we process: your owner account identity, restaurant membership, the restaurant you select, menu categories and items, and OAuth connection records. We do not receive or reconstruct your ChatGPT conversations.
• Scoped access: you choose one restaurant and the permissions (menu:read, menu:write) on the consent screen. Tokens only work for that restaurant.
• Retention: OAuth authorization codes expire after five minutes and access tokens after 30 days, or sooner if revoked. Menu and account data are kept while your CrumbPass account is active.
• Sharing: data is exchanged with ChatGPT only as needed to complete a tool call you requested. We do not sell it or use it for behavioral profiling.
• Your controls: cancel before authorizing, disconnect ChatGPT from your owner settings, or email support to request deletion.

See our AI & ChatGPT Plugin Policy and the full CrumbPass policy at crumbpass.in/privacy. Content you type into ChatGPT is also handled by OpenAI under its own privacy policy.

5. Data Protection & Security

We implement industry-standard encryption protocols (SSL/TLS) and secure database storage to safeguard your information against unauthorized access, loss, or misuse. Access to personal data is restricted to authorized personnel bound by confidentiality obligations.

6. Your Privacy Rights & Opt-Out

Under Indian DPDP regulations and international data protection laws, you have the right to:

• Access, modify, or delete your personal information stored with us.
• Opt out of marketing communications or WhatsApp messages at any time by replying "STOP" or contacting us.
• Request erasure of your mobile number from our verification databases.
• Submit a data deletion request, or raise a complaint with our Grievance Officer.
• See how we use cookies and the Meta Pixel in our Cookie Policy.

7. Contact Us

If you have any privacy inquiries, data subject requests, or Meta compliance questions, reach out to us: