Diwali catering Office & house parties →

Legal

Privacy Policy

Last updated: October 5, 2026

IndiaWaale Desi Street Food ("IndiaWaale", "we", "us") operates www.indiawaale.ca and is located at 3040 Don Mills Rd East, Peanut Plaza, North York, ON M2J 3C1. This policy explains how we collect, use, and protect your information.

1. Information We Collect

  • Contact details you provide: name, email address, phone number, and delivery address when you order, sign up, or opt in to promotions.
  • Catering enquiry details you choose to submit, such as your organization, event type, date, guest count, venue or postal code, menu preference and event notes.
  • Order and transaction information processed through our point-of-sale provider, Clover.
  • Basic website usage data (e.g., pages visited) to improve our service.

2. How We Use Your Information

  • To take and fulfil your orders and provide customer service.
  • To send you promotional offers, menu updates, and daily specials by email and WhatsApp, only where you have given consent or have an existing relationship with us.
  • To improve our menu, website, and overall service.

3. Marketing Messages & Consent

  • We send marketing messages via email and WhatsApp only to customers who have opted in or are existing customers.
  • You can unsubscribe from email at any time using the link in our messages, or stop WhatsApp messages by replying "STOP". You may also contact us directly to opt out.

4. Sharing of Information

  • We do not sell your personal information.
  • We share data only with service providers who help us operate (e.g., Clover for payments, Meta/WhatsApp and our email provider for messaging), and only as needed to provide our services.

5. Data Retention & Security

We keep your information only as long as needed for the purposes above and take reasonable measures to protect it.

6. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us.

Mobile App Data Deletion

  • To request deletion of personal information connected with the IndiaWaale app, email orders@indiawaale.ca with the subject "IndiaWaale app data deletion" and describe the information or service involved. Do not include passwords or payment-card details.
  • Saved favourites and menu data stay on your device. Clear favourites from Contact (the Visit tab in older app versions); uninstalling the app removes its local data, subject to your device backup settings.
  • We will delete personal information that IndiaWaale controls when it can reasonably be identified, unless it must be retained for legal, transaction, fraud-prevention or security purposes. Any required records are kept only for the applicable retention period.
  • Hosting security and request logs may remain subject to Vercel's retention and legal requirements. Information submitted after leaving the app is handled by the website or third-party service shown at that time.

7. IndiaWaale Mobile App

  • The app stores a menu copy and your saved favourites locally. Favourites are not sent to IndiaWaale and can be cleared within the app. Local app data may be included in device backups according to your device settings.
  • Menu refreshes, opening-hours checks and video playback request public information from indiawaale.ca. Our hosting provider Vercel processes and may retain your IP address, approximate city or country derived from it, and technical request diagnostics to deliver, maintain and protect the service. This is not GPS location. See Vercel's privacy notice for its hosting-data practices.
  • The app does not require a customer account or request access to your contacts, camera, microphone or device location. No advertising or analytics SDK is included in the native app.
  • In app versions that include native catering and tiffin forms, information is sent to IndiaWaale only when you submit an enquiry. This may include your name, email, phone number, postal code, preferred dates, guest count, menu preferences and notes. Our configured email service and, for tiffin enquiries, our spreadsheet integration process these details so our team can follow up. Please do not include payment-card details or sensitive health information. An enquiry is not a confirmed order, booking, subscription or payment.
  • Where enabled, the optional native AI assistant uses the consent and processing described below. Chat stays in app memory rather than being saved as a local transcript. Clear chat or close the app to remove local conversation history; this cannot erase data already sent to a provider.
  • Delivery ordering, Clover checkout, maps, reviews and social links open external services. Earlier app versions also open website forms instead of native forms. Information you provide on those services is handled under their applicable privacy policies. Website cookies and analytics may apply when you open website pages. Payment details are not collected by the native app, and returning from a checkout link does not itself confirm a payment.

8. Website & Mobile AI Chat and WhatsApp

  • Where enabled, AI chat is optional and intended for adults aged 18 and over. After you agree, your messages and a limited recent conversation history are sent through our server to Gemini models on Google Cloud to answer restaurant questions. AI answers can be inaccurate and are not confirmations of orders, payments, bookings, availability or allergy safety.
  • Google Cloud does not use customer data to train or fine-tune models without permission. Limited retention may apply for safety, abuse monitoring and legal requirements, and Google may cache data in memory for up to 24 hours. Processing may occur outside Canada. See Google Cloud's data governance documentation and terms.
  • Do not enter personal information, card numbers, security codes, passwords or other sensitive details. We filter common sensitive patterns and remove common email and phone formats before AI processing, but these filters cannot identify every type of personal information.
  • The website keeps the conversation in memory for the current page session, not in browser storage; the native assistant also keeps it only in app memory. Clear chat, refresh the website or close the app to remove that local history; this does not erase data already processed by a provider. We do not intentionally store chat transcripts or log message bodies on our server. Vercel may retain technical request information. When public AI chat is enabled, Upstash stores request counters and a keyed hash of your IP address for rate limiting; counter records expire within 26 hours. These records contain no chat text. See Upstash's privacy policy.
  • WhatsApp is a separate, optional conversation with our team. We prepare a short, editable enquiry draft instead of sharing the full AI transcript. Opening WhatsApp passes that draft to WhatsApp; you choose whether to send it. WhatsApp and IndiaWaale then process the information you share, including your WhatsApp phone number, to respond to your enquiry. Replies arrive in WhatsApp, not the website or native assistant. Starting a support conversation does not by itself sign you up for marketing.
  • In app versions that include "Report answer", you can explicitly send a selected assistant answer, a reason and an optional explanation to IndiaWaale through our email provider for content review and moderation improvements. Reporting does not send the full conversation or require your name or contact details. Reports may be retained in our support email records for review; clearing chat cannot withdraw a report already sent. Please do not include sensitive personal or payment information. Separate reporting rate limits use the same hashed-IP protection described above, without storing report text in the counters.

9. Contact Us

This policy may be updated from time to time. Continued use of our services means you accept the current version.

Your Assistant

Hi Namaste! How can I help you?

AI answers can be wrong. For orders, payments or allergies, speak with our team.

Chat privacy