This Privacy Policy explains how we collect, use, share and protect personal data when you use BentoPing — our WhatsApp-based staff-scheduling service for restaurants — available at bentoping.com and app.bentoping.com (the "Service"). It is intended to align with the Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules as applicable in India.
BentoPing is a tool that restaurants ("you", the account owner/manager) use to manage their own staff.
We process personal data to: create and manage accounts; provide the scheduling, attendance, leave and shift-cover features; send WhatsApp notifications to staff who have opted in; process subscription payments; provide customer support; ensure security and prevent abuse; comply with law; and improve the Service.
We process personal data on the basis of consent and/or as necessary to provide a service you have requested, consistent with the DPDP Act. Staff provide consent to receive WhatsApp messages through an in-WhatsApp opt-in, which includes an 18-and-above confirmation. Restaurants are responsible for ensuring they have a lawful basis to provide their staff's data to us.
We do not sell your personal data. We share personal data only with trusted third-party service providers who help us operate the Service, and only to the extent necessary for them to perform their function on our behalf, under appropriate confidentiality and security safeguards. These include providers of:
A current list of the specific service providers we use is available on request from us.
We may also disclose personal data if required by law, regulation, court order, or governmental request, or where necessary to protect our rights, safety, or property, or those of our users or the public.
Your data is hosted on servers and a managed database located in India (Bangalore region).
We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter only as required to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. You may request deletion of your data as described below; some records (e.g., transaction records) may be retained where the law requires.
Subject to the DPDP Act, you have the right to: access the personal data we hold about you; request correction or updating of inaccurate data; request erasure of your data; withdraw consent; and grievance redressal. Staff may withdraw WhatsApp consent at any time (e.g., by opting out). To exercise these rights, contact our sales at sales@bentoping.com. Where a restaurant is the Data Fiduciary for staff data, staff requests may be directed to that restaurant, and we will assist the restaurant as its processor.
The Service and WhatsApp messaging are intended for individuals 18 years of age or older. Staff confirm they are 18+ during opt-in. We do not knowingly collect personal data of children (persons under 18). If you believe a child's data has been provided to us, contact us and we will take appropriate steps to delete it.
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS/TLS), access controls, hashed credentials, and hosting within India. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Our web application uses browser local storage to keep you signed in and to remember basic preferences; it does not use third-party advertising or tracking cookies. Our marketing website uses only what is necessary to function.
We may update this Policy from time to time. Material changes will be posted on this page with a revised effective date. Continued use of the Service after changes take effect constitutes acceptance.
For any questions, requests, or complaints about your personal data, contact:
Kiratha Enterprises Sales— sales@bentoping.com.
We will acknowledge and address grievances within the timelines required by applicable law.