1. Data Ownership Philosophy
At beanthere (operated by Bean There, accessible at https://beanthere.co.in), we operate on a fundamental principle: independent merchants retain 100% ownership of their customer data. Unlike third-party delivery aggregators, beanthere never locks, monetizes, or sells customer lists to competing brands.
2. Information We Collect
We collect information to provide high-speed table-side ordering, Kitchen Display System (KDS) synchronization, packaged goods fulfillment, and Bites XP loyalty rewards:
- Merchant Account & Compliance KYC Data: Business owner name, business phone number, business email, store location, GSTIN, FSSAI license number, bank payout details, and verification documents (e.g. GST certificates, cancelled cheques) stored securely in encrypted private vaults.
- Guest Dining & E-Commerce Ordering Info: Mobile number or email address (provided during OTP verification or checkout), dining table number, doorstep shipping address with PIN code (for packaged coffee/merchandise orders), ordered items, and customer instructions.
- Verified Community Food Moments: Dish photos, captions, and ratings submitted voluntarily by guests to earn Bites XP rewards.
- Technical Logs & Operational Telemetry: IP address, browser type, device identifiers, and page interaction timestamps processed strictly to optimize system stability, detect security anomalies, and prevent fraud.
Cookies & Local Storage Disclosure
beanthere utilizes essential browser LocalStorage and temporary session tokens to maintain active dining sessions, cart items, and OTP authentication state. We do not deploy intrusive third-party cross-site advertising trackers, nor do we sell user browsing history. You may clear local storage or cookies at any time directly within your web browser settings.
3. How We Use Collected Data
Your data is processed strictly for legitimate operational purposes:
Order Fulfillment & KDS
Routing table-side QR orders instantly to kitchen screens (KDS), counter printers, and dispatch desks.
Loyalty & Bites XP
Calculating, crediting, and redeeming Bites XP rewards earned from verified dining visits and reviews.
Direct Merchant Re-Engagement
Enabling partner cafes to send transactional order status notifications and exclusive rewards directly via WhatsApp/SMS.
Platform Security & Compliance
Detecting fraudulent orders, preventing OTP abuse, and maintaining mandatory tax, FSSAI, and accounting records.
4. Data Sharing & Infrastructure Partners
We do not sell, rent, or trade personal data under any circumstances. Data is shared exclusively with verified cloud infrastructure providers operating under strict confidentiality and security protocols:
- Supabase Cloud: Encrypted relational database hosting, customer authentication, and private document vaults.
- Razorpay & UPI Payment Networks: RBI-licensed, PCI-DSS compliant direct payment settlement and gateway infrastructure.
- Courier & Logistics Partners: For retail orders requiring doorstep shipping, customer delivery address and phone number are shared solely to facilitate parcel fulfillment and delivery tracking.
- Cloudflare & Privacy Telemetry: Aggregated, anonymized performance monitoring to maintain 99.9% platform uptime.
5. Security & Encryption Standards
beanthere enforces SSL/TLS 256-bit encryption for all data in transit. In our database tier, strict Row-Level Security (RLS) policies enforce multi-tenant isolation, ensuring no restaurant or guest can access another store's data. Merchant KYC documents (PAN, GST, banking instruments) are stored in restricted, private buckets with automated access control.
6. Your Rights & Minor Protection (DPDP Act, 2023)
Under the Digital Personal Data Protection Act, 2023 (DPDP India) and applicable privacy regulations, you possess the right to:
- Request a summary of personal data collected and processed.
- Request correction, updating, or completion of inaccurate information.
- Request full erasure of your account and customer history (subject to statutory tax retention laws).
- Withdraw consent for marketing communications at any time.
Protection of Minors: beanthere services are designed for commercial merchants and dining guests of legal majority (18+). Minors may place dining orders only under parental or guardian supervision. We do not conduct behavioral profiling or deliver targeted advertising to minors.
In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, data privacy requests, consent withdrawals, and grievances are handled directly by our compliance desk:
