Privacy Policy

1. Introduction

Hidden Flavour Private Limited ("re-plate", "we", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our AI-powered kitchen intelligence platform. By using our Service, you consent to the practices described in this Policy.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, phone number, restaurant name, and billing details provided during registration.
• Kitchen Video Data: Video streams from CCTV cameras installed in your kitchen. This data is processed by our edge AI device on-premise. Only AI-derived events and compliance metadata (not raw video) are transmitted to our cloud.
• Compliance & Analytics Data: AI-generated scores, alerts, SOP adherence records, and chef-level training data.
• Device & Technical Data: IP address, device type, browser, and usage logs collected automatically when you use our dashboard or apps.
• Communications: Emails, WhatsApp messages, or support tickets you send to us.

3. How We Use Your Information

• To provide, maintain, and improve the re-plate Service.
• To generate compliance reports and send real-time alerts to your designated contacts.
• To send transactional emails (demo confirmations, invoices, account updates).
• To respond to your support requests.
• To analyse usage patterns and improve our AI models (using anonymised, aggregated data only).
• To comply with applicable legal obligations.

4. Video & Biometric Data

Our edge AI device processes video on-site. Raw video footage is not stored on re-plate's cloud servers. Only structured metadata (pose detection events, compliance flags, timestamps) is transmitted. This approach is designed to protect the privacy of your kitchen staff. Where applicable law requires explicit consent for biometric data processing, you are responsible for obtaining such consent from your employees.

5. Data Sharing

We do not sell your personal data. We may share information with:

• Service Providers: Third-party vendors (e.g., Resend for email, Razorpay for payments, AWS/cloud hosting) who assist in delivering our Service, under strict data processing agreements.
• Legal Authorities: When required by law, court order, or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

6. Data Retention

We retain your account and compliance data for the duration of your subscription plus 12 months after termination, unless a longer retention period is required by law. You may request earlier deletion by contacting us at privacy@re-plate.in.

7. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. However, no system is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the relevant data protection authority.

To exercise these rights, contact privacy@re-plate.in.

9. Cookies

Our website uses essential cookies for authentication and session management, and optional analytics cookies to understand usage. You can control cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website at least 14 days before the changes take effect.

11. Contact Us

For any privacy-related queries, contact our Data Protection Officer at privacy@re-plate.in.