MTOS v1.0.1 · Legal

Privacy Policy

Approved Manish Tiffins privacy policy — data collection, security, customer rights, and deletion under the DPDP Act, 2023.

Effective date: 2026-07-06 · Last updated: 2026-07-06

1. Company Information

Manish Tiffins ("we", "us", "our") operates the Manish Tiffins Operations System (MTOS) and provides daily home-style tiffin subscription and delivery services in Mumbai, Maharashtra, India.

Operations address: Mumbai, Maharashtra, India.

General contact: support@manishtiffins.com · Privacy: privacy@manishtiffins.com

2. Data Collected

  • Identity and contact: name, mobile number, email, delivery addresses
  • Authentication data: OTP verification records, session tokens
  • Subscription data: meal plans, skip days, meal change requests
  • Billing data: invoices, payment records, ledger balances, credits
  • Delivery data: route assignments, delivery timestamps, proof-of-delivery
  • Location data: GPS coordinates from staff devices during delivery and attendance
  • Technical data: IP address, device identifiers, audit logs
  • Communications: SMS and notification delivery logs

3. Purpose of Collection

  • Provide and manage tiffin subscriptions and daily meal delivery
  • Authenticate customers, staff, and delivery personnel
  • Generate invoices, process payments, and maintain billing records
  • Coordinate kitchen production and delivery routes
  • Send service notifications, OTPs, and billing alerts
  • Maintain security, fraud prevention, and operational audit trails
  • Comply with applicable laws and respond to lawful requests

4. Security Controls

MTOS does not sell customer data.

  • TLS encryption in transit (HTTPS)
  • Role-based access controls (RBAC)
  • HttpOnly secure cookies for authenticated sessions
  • JWT access and refresh token rotation with revocation
  • Rate limiting and audit logging
  • Daily encrypted database backups
  • Internal network isolation for database and cache services

5. Customer Rights (DPDP Act, 2023)

  • Right to access your personal data held by us
  • Right to correction of inaccurate data
  • Right to erasure (subject to legal and billing retention requirements)
  • Right to withdraw consent for optional processing
  • Right to nominate another individual to exercise rights on your behalf
  • Right to grievance redressal via our Grievance Officer

6. Data Deletion Process

To request deletion of your personal data, email privacy@manishtiffins.com with your registered mobile number and account details.

We will verify your identity before processing. Billing, audit, and legally required records may be retained per our Data Retention Policy.

Deletion requests are acknowledged within 7 working days and processed where applicable under the DPDP Act, 2023.

7. Contact Information

  • Privacy enquiries: privacy@manishtiffins.com
  • Customer support: support@manishtiffins.com
  • Grievance Officer: Manish Kumar — support@manishtiffins.com
  • Phone: +91-98200-60001
  • Address: Mumbai, Maharashtra, India

GPS Policy

Manish Tiffins uses GPS location data only for the following operational purposes:

  • Delivery operations — route execution and proof-of-delivery
  • Attendance — verifying staff presence during active shifts
  • Route verification — confirming delivery sequence and completion
  • Operational analytics — aggregate route performance (not individual marketing)

GPS Limitations

  • GPS is collected from staff devices during active sessions only
  • Customer personal devices are not continuously tracked
  • GPS data is not used for marketing or sold to third parties
  • Retention: 180 days per Data Retention Policy

Grievance Officer

  • Name: Manish Kumar
  • Email: support@manishtiffins.com
  • Response timeline: Within 7 working days

Grievance Process

Customers may raise grievances regarding privacy, billing, delivery, or service quality by emailing the Grievance Officer with their registered mobile number and account details.

Grievances are acknowledged and investigated. Resolution is communicated within the stated response timeline.

AI Disclosure

MTOS uses artificial intelligence and automated systems for:

  • Billing automation — invoice generation and reconciliation assistance
  • Kitchen forecasting — production planning and meal volume estimates
  • Delivery planning — route optimisation and stop sequencing
  • Notifications — automated customer and staff alerts
  • Analytics — operational performance and trend analysis

Human Authority

All final business decisions — including billing adjustments, refunds, credits, settlements, and service exceptions — remain with human management.

Automated outputs are reviewed and may be overridden by authorised staff.

Privacy Policy | Manish Tiffins