Zesday — Privacy Policy
Version: 2.0 · Effective date: 16 September 2026
Qubrix Technode Private Limited ("Zesday", "we", "us"), with its registered office at Runway Studio Suites, 109, Gaur Yamuna City, YEIDA, Nawada, Gautam Buddha Nagar - 203201, Uttar Pradesh, runs the Zesday apps and website. We are the Data Fiduciary for the personal data processed through them under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025.
This policy explains what we collect, why, who we share it with, how long we keep it, and your rights. It applies to customers, restaurant partners and their staff, and delivery partners ("you").
1. What we collect
| What | Examples | Why |
|---|---|---|
| Account and contact | Name, mobile number, email address (if you give it) | Sign-in, order updates, emailed invoices and support |
| Addresses and location | Saved delivery addresses; your device location when you allow it; a delivery partner's live location while on duty | Showing restaurants that deliver to you, delivery, live tracking and arrival times |
| Orders and payments | Items, amounts, invoices, refunds, Wallet activity, payment references from our payment aggregators | Processing and refunding orders; tax and accounting records |
| Delivery and order issues | Delivery codes, and the notes and photos you send about a problem with an order | Confirming hand-over and resolving complaints |
| Partner verification and payouts | For restaurants and delivery partners: PAN, FSSAI and GST details, bank account details, identity and vehicle documents | Onboarding, verification, payouts, tax deduction and fraud prevention |
| Photos you upload | Review photos, dish photos, support evidence | Reviews, menus and resolving issues |
| Device and technical | Device model, operating system, app version, push-notification token, IP address, logs | Sending order updates, security, fraud prevention and fixing faults |
| Support conversations | Messages to in-app Help, including the automated assistant; ratings and reviews | Answering questions, quality and safety |
We never see or store your full card number, CVV or UPI PIN — our payment aggregators, PayU and Razorpay, handle those.
The apps use your camera and photos only when you choose to upload a picture, and your location only after you allow it. A delivery partner's location is collected while they are on duty, with a visible notification on their phone; it is not collected when they are off duty.
We do not access your contacts, SMS messages or call logs. We do not sell personal data, and we do not use it for third-party advertising.
2. Why we use it
We use personal data to:
- create and run your account and sign you in;
- take, prepare, deliver and track orders, and confirm delivery;
- take payments, issue refunds and make payouts;
- verify restaurants and delivery partners, and protect payout bank accounts;
- prevent fraud and abuse, and keep customers, partners and staff safe;
- provide support, handle complaints and improve the service;
- meet our tax, food-safety, consumer-protection and other legal obligations; and
- with your consent only, send you offers.
We process personal data with your consent, or for the legitimate uses the DPDP Act allows without separate consent — such as providing a service for which you gave us the data, meeting a legal obligation, or responding to a medical emergency or threat to safety.
3. Consent and choices
We ask for consent in plain language when we need it. You can withdraw consent as easily as you gave it — by turning off location or notifications in your phone settings, opting out of offers, or writing to us (section 11). Withdrawing consent does not affect processing already done, but features that depend on that data may stop working.
4. Who we share it with
We share personal data only as needed for the purposes above.
| Who | What they receive | Why |
|---|---|---|
| The restaurant for your order | Your name, order details and instructions | Preparing your order |
| Your delivery partner | Your name, delivery address, order details and a way to contact you about the delivery | Delivering your order |
| PayU and Razorpay | Payment and refund details; for partners, bank account details | Payments, refunds, payouts and bank-account verification |
| Push-notification token (Firebase Cloud Messaging); location, map views and address searches in our apps (Google Maps) | Order updates, maps and address search | |
| Meta (WhatsApp) | Your mobile number and sign-in codes; your messages, if you choose to order through WhatsApp | Sign-in and WhatsApp ordering |
| Resend | Your email address and the emails we send you, such as order invoices | Sending emails |
| Cloudinary | Photos and documents you upload. Verification documents are kept in private storage that only authorised staff can open | Storing images and verification documents |
| Anthropic and OpenAI | Messages you send to the in-app assistant, with basic details of your most recent order (order number, status, amount and restaurant); your messages to the WhatsApp ordering assistant, if you use it | Answering your questions and taking WhatsApp orders |
| OpenStreetMap | Your IP address and the map area you view on our website | Showing maps on the website |
| Open-Meteo | The approximate area (about 10 km) of the restaurant and the delivery point — no name or contact details | Checking for rain before a rain fee is applied |
| Cloud hosting providers | The data we store, under contract | Running our service |
| Government authorities | Data the law requires, such as tax records or information requested under a valid legal order | Legal compliance |
Restaurants and delivery partners may use your data only to fulfil your order. Our service providers process data on our instructions and under contract.
Some of these providers process data outside India. We transfer personal data abroad only as the DPDP Act permits.
5. Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you, how we use it, and who we have shared it
with;
- have inaccurate or incomplete data corrected, completed or updated;
- have your data erased when it is no longer needed and the law does not require us to keep it;
- withdraw consent;
- nominate another person to exercise your rights if you die or become unable to; and
- have your complaint resolved by us and, if you are not satisfied, complain to the Data Protection
Board of India.
Use in-app Help or write to us (section 11). We may need to confirm your identity before acting on a request. We respond within the period the DPDP Rules allow, and in any case within 90 days.
6. Deleting your account
You can delete your account from Profile → Delete my account in the customer app, Settings → Delete account in the restaurant app, Delete account on your profile in the delivery partner app, or on the Delete account page of our website.
- Your account stops working as soon as you ask. Contact us within 30 days if you change your mind.
- If you have an order still in progress, deletion waits until it is finished.
- After that, we remove your name, phone number, email, saved addresses and notification token, and,
for delivery partners, verification and bank details.
- We keep order and invoice records because tax law requires it, with your delivery address removed.
Restaurant business records are kept for as long as the law requires.
- A deleted account cannot be recovered.
7. How long we keep data
| Data | How long |
|---|---|
| Account profile | While your account is open; removed after deletion as described in section 6 |
| Orders, invoices, payments, refunds, payouts and tax records | As long as GST, income-tax and company law require — generally eight years |
| Partner verification documents and bank details | While you partner with us, then only as long as tax or fraud-prevention law requires |
| Delivery location history, support conversations and complaints | As long as needed to resolve the order, complaint, safety incident or dispute they relate to |
| Security and access logs | At least one year, as the DPDP Rules require |
After that, data is deleted or anonymised.
8. Security
We protect personal data with encryption in transit, private storage for verification documents, role-based staff access, one-time codes for payout bank-account changes, tokenised payments and audit logs. No system is completely secure; you can help by keeping your sign-in and delivery codes private.
If a personal-data breach occurs, we will inform the people affected and the Data Protection Board of India, as the DPDP Act and Rules require.
9. Children
You must be at least 18 to use Zesday. We do not knowingly collect personal data from children. If we learn that we have, we will delete it.
10. Cookies
Our website uses browser storage for sign-in, your cart and your chosen location. See our Cookie & Tracking Technologies Policy.
11. Contact us
- Grievance Officer: Yogesh kumar — support@zesday.com — +918874777477
- Data-protection contact: Yogesh kumar — support@zesday.com
- Support: in-app Help or support@zesday.com
- Post: Qubrix Technode Private Limited, Runway Studio Suites, 109, Gaur Yamuna City, YEIDA,
Nawada, Gautam Buddha Nagar - 203201, Uttar Pradesh
We acknowledge complaints within 48 hours. If you are not satisfied with our response, you can complain to the Data Protection Board of India. See our Grievance Redressal Policy.
12. Changes to this policy
We may update this policy. We will tell you about material changes in the app and, where required, ask for your consent again. The current version and its effective date are always shown at the top.