Privacy Policy
Privacy Policy
Last updated: July 5, 2026
CoreCade Technologies ("we") respects your privacy. This policy explains what we collect, why, and your rights.
1. Data We Collect
- Account data: name, email, phone, hashed password, role.
- Café operational data: devices, bookings, sessions, orders, memberships, staff, revenue records.
- Customer data (uploaded by café owners): name, phone, wallet balance, play history.
- Payment metadata: transaction IDs, amount, method (we do not store card numbers).
- Technical data: IP address, device/browser, log timestamps, error traces.
2. How We Use It
- Deliver, secure and improve the Service.
- Send transactional emails (welcome, invoices, trial expiry, staff invites).
- Detect abuse, comply with law, resolve disputes.
We do not sell your personal data.
3. Legal Bases (where applicable)
Contract performance, legitimate interest (security, product improvement), consent (marketing), and legal obligation.
4. Third-Party Processors
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database, auth, storage | Global |
| Cloudflare | Hosting, DDoS protection | Global edge |
| Resend | Transactional email delivery | US/EU |
| Razorpay | Payment processing | India |
| Formspree | Contact form intake | US |
5. Data Retention
Account and operational data is retained while your subscription is active and for 12 months after cancellation, unless a longer period is required by law (e.g. tax records — 8 years).
6. Your Rights
Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you may request access, correction, deletion, or export of your personal data. Email privacy@corecade.in and we will respond within 30 days.
7. Security
We use TLS in transit, encryption at rest, row-level security in the database, least-privilege access controls, and audit logging.
8. Cookies
We use only strictly-necessary cookies (session, CSRF, preferences). No third-party advertising cookies.
9. Children
The Service is not directed to children under 18.
10. Grievance Officer
Under India's IT Rules 2021 and the DPDP Act 2023:
Name: Grievance Officer, CoreCade Technologies Email: grievance@corecade.in Address: Bengaluru, Karnataka, India Response window: 15 working days.
11. Changes
Material changes will be notified in-app and by email at least 15 days in advance.