Privacy Policy

Effective Date: 16th January 2026

1. Introduction

Messoka (“we”, “our”, “us”) operates a digital platform that connects Users with independent Mess Owners for meal subscription services.

This Privacy Policy explains how we collect, use, store, process, and protect your personal data in accordance with:

  • Information Technology Act, 2000
  • IT (Reasonable Security Practices and Procedures) Rules
  • Digital Personal Data Protection Act, 2023 (DPDP Act)

2. Data We Collect

A. User Information

  • Name
  • Phone number
  • Email address
  • Delivery address
  • Location (approximate or precise)
  • Subscription history
  • Payment transaction details

B. Mess Owner Information

  • Business name & address
  • Contact details
  • Latitude & longitude of mess location
  • Government ID (PAN, Aadhaar where permitted)
  • FSSAI / GST details
  • Bank account information for payouts

3. How We Use Your Data

  • Account creation and authentication
  • Processing subscriptions and payments
  • Facilitating connection between Users and Mess Owners
  • Location-based mess discovery
  • Customer support and dispute tracking
  • Fraud prevention and security monitoring
  • Legal compliance and regulatory reporting

4. Location Data

We may collect location data:

  • To show nearby mess services
  • To calculate delivery distance
  • To register the exact location of a mess

Messoka does not perform continuous background tracking.

5. Payment Information

Payments are processed through authorized payment gateways.

Messoka does not store complete card details. We may store transaction IDs and payment references for reconciliation.

6. Data Sharing

We may share data with:

  • Mess Owners (for order fulfillment)
  • Payment gateway providers
  • Cloud hosting providers
  • Government or legal authorities when required

We do not sell personal data.

7. Data Retention

Personal data is retained only as long as necessary for:

  • Service delivery
  • Legal compliance
  • Fraud prevention
  • Accounting and tax obligations

8. Your Rights Under DPDP Act

  • Right to access your personal data
  • Right to correction or updating
  • Right to withdraw consent
  • Right to grievance redressal
  • Right to erasure (subject to legal obligations)

9. Data Security

We implement reasonable technical and organizational security measures including:

  • Encrypted data transmission (HTTPS)
  • Access controls
  • Secure server infrastructure
  • Periodic security audits

10. Children’s Privacy

Messoka services are not intended for individuals below 18 years of age.

11. Cross-Border Data Transfers

Data may be processed on servers located in India or other jurisdictions, subject to applicable Indian laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the platform constitutes acceptance of the revised policy.

13. Contact & Grievance Officer

For privacy-related concerns or to exercise your rights:

📧 support@messoka.in

We will respond within a reasonable time as required under applicable Indian law.