Privacy Policy

1. Information We Collect

Account information

• Phone number — used to sign in via OTP (one-time password) verification.
• Name and email address (email is optional) — provided by you when you complete your profile.

Location information

• Your delivery address and a map pin location, so we can calculate delivery distance and route your order to the nearest available restaurant and delivery partner within the Naraingarh service area.
• Device location (if you grant permission), used only to pre-fill or refine your delivery address — never tracked in the background.

Order and payment information

• Order history: restaurant, items, prices, delivery instructions, and order status.
• Payment method selection (e.g., Cash on Delivery or online payment). If you pay online, your card, UPI, or netbanking details are processed directly by our payment gateway partner (Razorpay) — Mexill does not store your full card or bank credentials on its own servers.

Communications

• Messages exchanged with delivery partners or customer support regarding your order.
• Push notification tokens (via Firebase Cloud Messaging), used to send you order status updates.

Device & usage information

• Basic device and app diagnostic information (app version, device type, crash logs) used to keep the app reliable.

2. How We Use Your Information

• To create and manage your account and verify your identity via OTP.
• To process and fulfill your food orders, including sharing necessary details with the restaurant and delivery partner assigned to your order.
• To calculate delivery distance, time estimates, and delivery fees within the Naraingarh service area.
• To process payments securely through our payment gateway partner.
• To send order status updates and important service notifications.
• To respond to customer support requests.
• To maintain the security, integrity, and reliability of the Mexill platform.
• To comply with applicable tax, accounting, and legal obligations in India.

3. How We Share Information

We do not sell your personal information. We share the minimum information necessary with:

• Restaurant partners — your order details and, where relevant, your name and delivery address, so they can prepare and hand off your order.
• Delivery partners — your name, phone number, and delivery location, so they can complete your delivery.
• Payment gateway providers — transaction details required to process your payment. Card and bank details are handled directly by the payment gateway under its own PCI-DSS compliant security standards.
• Service providers such as Firebase/Google (authentication and push notifications) and mapping providers (delivery address and distance calculation), strictly to operate the app.
• Law enforcement or regulators, only where required by applicable law.

4. Third-Party Services We Use

• Firebase (Google) — phone number OTP verification and push notifications.
• Payment gateway (Razorpay) — secure processing of online payments.
• Mapping services (Google Maps and OpenStreetMap) — displaying maps and calculating delivery distance.

These providers process data under their own privacy policies in addition to this one.

5. Data Storage & Security

Your data is transmitted over encrypted (HTTPS) connections and stored on secured servers. We restrict access to personal information to employees and partners who need it to operate the service. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.

6. Data Retention

We retain account information for as long as your account is active. Order and transaction records may be retained for a longer period — typically up to 6 years — where required to comply with Indian tax (GST) and financial recordkeeping regulations, even after you delete your account.

7. Your Rights & Choices

• You can review and update your name and email at any time from Profile → Edit Profile in the app.
• You can disable push notifications from your device's app settings.
• You can request a copy of the personal data we hold about you by contacting us (see Section 11).
• You can request correction or deletion of your data at any time.

8. Deleting Your Account & Data

Tap Profile → Delete My Account in the app, which opens our Account & Data Deletion page. If you're logged in, it recognizes your account automatically and lets you confirm deletion immediately — no need to re-enter your phone number. The same page also works from a regular browser without the app installed, in which case you can submit a request with your registered phone number instead.

See our full Data Deletion Policy for what is deleted, what is retained, and how long the process takes.

9. Children's Privacy

Mexill is intended for users aged 18 and above who can enter into a binding contract for the purchase of food and delivery services. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. We will post the updated version on this page with a new "Last updated" date. Continued use of Mexill after changes take effect means you accept the revised policy.