Privacy Policy

Introduction & Scope

Messoka ("we", "us", "our") provides discovery, registration, and management tools for mess and tiffin services. This Privacy Policy applies to our websites, applications, and related services (collectively, the "Services"). By using the Services, you agree to the practices described here.

Definitions

• Personal Data: Information that identifies or relates to an identifiable individual.
• Processing: Any operation performed on Personal Data (collection, storage, use, disclosure, etc.).
• Controller: The entity that determines the purposes and means of Processing Personal Data (Messoka for our Services).
• Processor: A third party that Processes Personal Data on behalf of the Controller.

Information We Collect

1) Information You Provide

• Account data: name, email, phone, address, profile photo.
• Business data: mess/tiffin service details, documents you upload.
• Transactions: bookings, orders, invoices, payment method details (processed by our payment partners).
• Communications: messages, reviews, ratings, support requests.

2) Information Collected Automatically

• Usage and device data: IP address, browser/OS, device identifiers, pages viewed, session duration, referrer, approximate location.
• Log and diagnostic data to monitor performance and reliability.

3) Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to remember preferences, secure your session, and analyze usage. See Cookies.

4) Information from Third Parties

• Sign-in providers (if enabled) and payment processors.
• Public sources and partners for fraud prevention and business verification.

Legal Bases for Processing (GDPR)

• Contract: To provide and operate the Services you request.
• Legitimate Interests: Security, product improvement, analytics, preventing abuse.
• Consent: Marketing communications, certain cookies/analytics.
• Legal Obligation: Compliance with tax, accounting, or regulatory requirements.

How We Use Your Information

• Provide, maintain, personalize, and improve the Services.
• Process payments and send confirmations, receipts, and updates.
• Respond to requests, provide support, and communicate service notices.
• Monitor usage, perform analytics, and develop new features.
• Detect, investigate, and prevent fraud, abuse, or security incidents.
• Comply with applicable laws and enforce our terms.

Information Sharing and Disclosure

• Service Providers/Processors assisting with hosting, analytics, payments, messaging, and support.
• Business Transfers in connection with a merger, acquisition, or asset sale.
• Legal/Protective disclosures to comply with law or protect rights, safety, and property.
• With Your Consent for any other disclosed purpose.

International Data Transfers

Your information may be transferred to and processed in countries other than where you reside. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect your data.

Data Retention

We retain Personal Data for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and context (e.g., transactional records may be kept for tax requirements for up to 7 years).

Data Security

We use administrative, technical, and organizational safeguards designed to protect Personal Data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Your Privacy Rights

Depending on your region, you may have the following rights:

• Access, rectify, update, or delete your Personal Data.
• Object to or restrict processing; withdraw consent where processing is based on consent.
• Data portability.
• Right to lodge a complaint with a supervisory authority.

California residents: You may have rights under CCPA/CPRA, including the right to know, delete, correct, and opt out of certain sharing. We do not sell Personal Data as defined by CCPA.

Cookies and Preferences

• Essential: Required for core functionality and security.
• Analytics: Help us understand usage and improve the product.
• Functional: Remember preferences (e.g., language, location).
• Marketing: With consent, for communications relevant to you.

You can control cookies via your browser settings. Disabling certain cookies may impact functionality.

User Generated Content

Content you submit (reviews, photos, listings) may be publicly visible. Avoid sharing sensitive Personal Data in public fields.

Third-Party Services and Links

Our Services may link to third-party websites or integrate with third-party providers (e.g., payments, maps). Their privacy practices are governed by their own policies.

Do Not Track

Some browsers offer a Do Not Track (DNT) signal. Because there is no uniform standard, we do not respond to DNT signals at this time.

Manage Your Data

• Access/Update: Update profile details in your account.
• Data Export: Request a copy of your data by contacting us.
• Deletion: You can request account deletion; some data may be retained as required by law.
• Marketing Choices: Opt out via unsubscribe links or by contacting us.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via the Services and the "Last Updated" date will be revised.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us: