Privacy Policy

This Privacy Policy explains how Rozcash (“we”, “us”), which runs the OrderWa ordering platform at rozcash.fun and on WhatsApp, collects, uses and protects personal data. It applies to customers who order, shop owners who list their shop, and anyone who visits the site. We follow the Information Technology Act, 2000, its rules, and the Digital Personal Data Protection Act, 2023 (as it comes into force).

1. Who we are

Rozcash provides software (OrderWa) that lets local shops take orders through a chat-style web link and WhatsApp. Each shop is an independent business. For data you give a shop when ordering, the shop decides how to fulfil your order; we process that data on the platform so the order can reach the shop.

Business details: Rozcash / OrderWa · Email: info.rozcash@gmail.com · Address: [Business postal address — to be added]

2. Data we collect

Customers (people who order)

• Name and 10-digit mobile number you enter (or your WhatsApp profile name and number if you order on WhatsApp).
• Order details: items, quantities, total, any discount, pickup or delivery, delivery address (only for delivery), notes to the shop, order status, and any rating/review you leave.
• Customer account (optional): if you create a My Orders login, your mobile number, name and a 6-digit PIN (stored only as a one-way encrypted hash — we cannot see your PIN).
• Location (optional): if you tap “Near me”, your browser shares your approximate location to sort nearby shops. It is used on your device for that search and is not saved to your account.

Shop owners

• Shop name, owner WhatsApp/mobile number, email (if given), city, area, shop type, opening details, menu items and prices, photos you upload, offers, UPI ID, and shop location if you choose to add it.
• Login PIN — stored only as a one-way encrypted hash.
• Shop verification (KYC): owner PAN, shop GSTIN (or your declaration that the shop is not GST registered), full shop address with PIN code, and a photo of the shop front. We use these only to verify that the shop is real before it is listed or can take orders, to prevent fraud, and to meet legal requests. Your PAN and GSTIN are visible only to the OrderWa admin team — never to customers. We keep them while your shop account exists and for up to 3 years after closure (for fraud and legal records), then delete them.

Technical data (everyone)

• To stop spam and abuse, we keep a one-way scrambled (hashed) form of your IP address with signups, orders and rate-limit counters. We do not store raw IP addresses in our database.
• Our hosting provider may keep standard server logs (IP, browser, time, page requested) for security and troubleshooting.

We do not collect card or bank details. Customer payments for orders are made directly to the shop — usually at delivery/pickup in cash or UPI, or by UPI in advance if you choose; we never receive or store that money or your UPI PIN. When a shop owner pays for an OrderWa plan, the payment is handled by Razorpay (a licensed payment aggregator); we receive only the payment ID, amount, plan and status — never full card, bank or UPI PIN details.

3. How we use your data

• To place your order, send it to the shop, show live order status and let you track it.
• To send order messages on WhatsApp when you order through WhatsApp or when the shop contacts you about your order.
• To run accounts, logins and the shop dashboard.
• To show shops in the public directory (shop details only — never customer data).
• To prevent fraud, spam and misuse, and to keep the service secure.
• To answer support requests and complaints, and to meet legal obligations.

We use your data only with your consent (given when you place an order, sign up or log in) or where the law otherwise allows. You can withdraw consent by contacting us; this may mean we can no longer process new orders for you.

4. Who we share it with

• The shop you order from — your name, number, address (for delivery), items and notes, so it can fulfil the order and contact you. The shop is responsible for how it uses this data after that.
• Service providers who help us run the platform: our web hosting provider (Hostinger), Meta Platforms (WhatsApp Business Platform) for WhatsApp messages, and Razorpay for shop subscription payments.
• Authorities when required by law, court order, or to protect users, shops or the public.

We do not sell, rent or trade your personal data, and we do not share it with advertisers.

5. WhatsApp

If you message a shop through OrderWa on WhatsApp, your messages, WhatsApp number and profile name pass through Meta’s WhatsApp Business Platform to our server so we can show the menu, build your cart and place the order. Meta’s own terms and privacy policy also apply to your use of WhatsApp. We keep a short chat state (cart, last address) so you don’t need to retype it, and a list of handled message IDs that is deleted automatically after about 7 days. We do not send promotional WhatsApp messages without your permission. To stop receiving messages, block the number in WhatsApp or contact us.

6. Cookies, sessions & local storage

We use only what is needed for the site to work — no advertising or tracking cookies and no third-party analytics.

• Session cookie — keeps a shop owner, customer or admin logged in. Deleted when you log out or it expires.
• Local storage on your device — remembers your language (English/Hindi), your last chosen city, your recent order links, a shop’s ID on the login screen, and the dashboard sound setting.

You can clear these at any time in your browser settings; you will just need to log in again. More detail: Cookie notice.

7. How long we keep data

• Orders: kept while the shop’s account is active so the shop and you can see order history, and as long as needed for tax, accounting or legal reasons.
• Customer accounts: until you ask us to delete them.
• Shop accounts: until the shop asks us to close the account, plus any period required by law.
• Anti-spam counters: automatically deleted after about 2 days. WhatsApp message IDs: about 7 days.

When data is no longer needed, we delete it or make it anonymous.

8. Security

We use HTTPS encryption, hashed PINs, login lockouts after repeated wrong attempts, rate limits and access controls. No online service is 100% secure; if a data breach affects you, we will inform you and the authorities as required by law.

9. Your rights

You can ask us to: access a summary of your personal data; correct or update it; delete it (subject to legal record-keeping); withdraw consent; and nominate someone to act for you in case of death or incapacity. Email info.rozcash@gmail.com from — or mentioning — the mobile number linked to your orders. We may ask you to verify that the number is yours. If you are not satisfied with our reply, you can contact the Grievance Officer below and, once available, the Data Protection Board of India.

For data a shop holds about you outside OrderWa (for example in its own WhatsApp chats), please contact the shop directly.

10. Children

OrderWa is meant for users aged 18 and above. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy. The “Last updated” date above will change, and for important changes we will show a notice on the site.

12. Contact & Grievance Officer

Questions or complaints about privacy:

We aim to acknowledge complaints within 24–48 hours and resolve them within 15 days, or sooner where the law requires.