Privacy Policy
Effective Date: 16th January 2026
1. Introduction
Messoka (“we”, “our”, “us”) operates a digital platform that connects Users with independent Mess Owners for meal subscription services.
This Privacy Policy explains how we collect, use, store, process, and protect your personal data in accordance with:
- Information Technology Act, 2000
- IT (Reasonable Security Practices and Procedures) Rules
- Digital Personal Data Protection Act, 2023 (DPDP Act)
2. Data We Collect
A. User Information
- Name
- Phone number
- Email address
- Delivery address
- Location (approximate or precise)
- Subscription history
- Payment transaction details
B. Mess Owner Information
- Business name & address
- Contact details
- Latitude & longitude of mess location
- Government ID (PAN, Aadhaar where permitted)
- FSSAI / GST details
- Bank account information for payouts
3. How We Use Your Data
- Account creation and authentication
- Processing subscriptions and payments
- Facilitating connection between Users and Mess Owners
- Location-based mess discovery
- Customer support and dispute tracking
- Fraud prevention and security monitoring
- Legal compliance and regulatory reporting
4. Location Data
We may collect location data:
- To show nearby mess services
- To calculate delivery distance
- To register the exact location of a mess
Messoka does not perform continuous background tracking.
5. Payment Information
Payments are processed through authorized payment gateways.
Messoka does not store complete card details. We may store transaction IDs and payment references for reconciliation.
6. Data Sharing
We may share data with:
- Mess Owners (for order fulfillment)
- Payment gateway providers
- Cloud hosting providers
- Government or legal authorities when required
We do not sell personal data.
7. Data Retention
Personal data is retained only as long as necessary for:
- Service delivery
- Legal compliance
- Fraud prevention
- Accounting and tax obligations
8. Your Rights Under DPDP Act
- Right to access your personal data
- Right to correction or updating
- Right to withdraw consent
- Right to grievance redressal
- Right to erasure (subject to legal obligations)
9. Data Security
We implement reasonable technical and organizational security measures including:
- Encrypted data transmission (HTTPS)
- Access controls
- Secure server infrastructure
- Periodic security audits
10. Children’s Privacy
Messoka services are not intended for individuals below 18 years of age.
11. Cross-Border Data Transfers
Data may be processed on servers located in India or other jurisdictions, subject to applicable Indian laws.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the platform constitutes acceptance of the revised policy.
13. Contact & Grievance Officer
For privacy-related concerns or to exercise your rights:
📧 support@messoka.in
We will respond within a reasonable time as required under applicable Indian law.