This Privacy Policy explains how we collect, use, share and protect personal data when you use BentoPing — our WhatsApp-based staff-scheduling service for restaurants — available at bentoping.com and app.bentoping.com (the "Service"). It is intended to align with the Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules as applicable in India.
BentoPing is a tool that restaurants ("you", the account owner/manager) use to manage their own staff.
We process personal data to: create and manage accounts; provide the scheduling, attendance, leave and shift-cover features; send WhatsApp notifications to staff who have opted in; process subscription payments; provide customer support; ensure security and prevent abuse; comply with law; and improve the Service; and analyse irreversibly anonymised usage data in order to operate and improve the Service. We do not use message content or staff personal data to create, develop, train or improve any machine-learning or artificial-intelligence system for the benefit of any third party.
We process personal data on the basis of consent and/or as necessary to provide a service you have requested, consistent with the DPDP Act. Staff provide consent to receive WhatsApp messages through an in-WhatsApp opt-in, which includes an 18-and-above confirmation. The restaurant must obtain each staff member's consent, as laid out in our Terms of Service, before adding that person's details to the Service. The staff member then receives a confirmation message on WhatsApp.Restaurants are responsible for ensuring they have a lawful basis to provide their staff's data to us.
We do not sell your personal data. We share personal data only with trusted third-party service providers who help us operate the Service, and only to the extent necessary for them to perform their function on our behalf, under appropriate confidentiality and security safeguards. These include providers of:
A current list of the specific service providers we use is available on request from us.
We may also disclose personal data if required by law, regulation, court order, or governmental request, or where necessary to protect our rights, safety, or property, or those of our users or the public.
Your data is hosted on servers and a managed database located in India (Bangalore region).Further, WhatsApp messages are transmitted through the infrastructure of Meta Platforms.
We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter only as required to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. You may request deletion of yourWe will erase the personal data as described below; somein cases of (a) withdrawal of consent and (b) the purpose for which it was collected ceasing to be served. Staff personal data is erased if staff member opts out of is removed by the restaurant, in accordance with the applicable law. Some records (e.g.,for example, transaction records) may be retained where the law requires.
Subject to the DPDP Act, you have the right to: access the personal data we hold about you; request correction or updating of inaccurate data; request erasure of your data; withdraw consent; and grievance redressal. Staff may withdraw WhatsApp consent at any time (e.g., by opting out). To exercise these rights, contact our sales at sales@bentoping.com. Where a restaurant is the Data Fiduciary for staff data, staff requests may be directed to that restaurant, and we will assist the restaurant as its processor.
The Service and WhatsApp messaging are intended for individuals 18 years of age or older. Staff confirm they are 18+ during opt-in. Restaurants must not add the details of any person below that age.We do not knowingly collect personal data of children (persons under 18). If you believe a child's data has been provided to us, contact us and we will take appropriate steps to delete it.
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS/TLS), access controls, hashed credentials, and hosting within India. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.Where we are the Data Fiduciary, if a personal data breach occurs, we will notify each affected individual and the Data Protection Board in the manner and within the timelines prescribed under the DPDP Act and the rules made under it. Where we act as a Data Processor, we will notify the restaurant without undue delay after becoming aware of a breach affecting its staff's personal data.
Our web application uses browser local storage to keep you signed in and to remember basic preferences; it does not use third-party advertising or tracking cookies. Our marketing website uses only what is necessary to function.
We may update this Policy from time to time. Material changes will be effective once posted on this page with a revised effective date. Your continued use of the Service after changes take effect constitutes acceptance.
For any questions, requests, or complaints about your personal data, contact:
Kiratha Enterprises Sales— sales@bentoping.com.
We will acknowledge and address grievancesevery grievance within the timelines required by applicable law.forty-eight (48) hours of receipt and redress it within one (1) month.