Privacy Policy

Last updated: 21 May 2026

1. Who we are

Swaad is a catering-management service operated by dhumketu.space. This policy explains what we collect, why, and the choices you have. For any privacy question or request, contact us at support@dhumketu.space.

2. Information we collect

2.1 Account information

When you sign in with Google, we receive a limited profile from Google OAuth: your name, primary email address, profile picture URL, and your Google account identifier (the sub id). We do not receive your Google password.

2.2 Content you create

The menus, recipes, dishes, media, and event or order data you create in your workspace. This content belongs to you; we store and process it solely to operate the Service for you and your team.

2.3 Application telemetry

To keep the Service reliable, our application clients send health and crash diagnostics: crash and error events, app version, operating-system version, an anonymous device identifier, a session identifier, and a timestamp. Telemetry does not include the contents of your menus, recipes, or orders.

2.4 Billing information

Subscriptions are processed by Razorpay. We store only subscription metadata — subscription id, plan, amount, currency, and renewal dates. We never receive or store full card or bank-account details; those are handled by Razorpay under their own terms.

2.5 Logs

Our servers keep standard request logs (IP address, user agent, request path, timestamp, and response status) for security and debugging. Logs are retained for no more than 90 days.

3. How we use information

To authenticate you and operate your workspace.
To operate, debug, maintain, and improve the Service.
To process subscriptions and prevent fraud.
To send essential service, security, and billing communications.
To meet legal obligations.

We do not sell personal data. We do not use your workspace content to train machine-learning models.

4. Google user data and Limited Use

Swaad's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

We use Google user data only to provide and improve user-facing features of the Service.
We do not transfer Google user data to others except as necessary to provide and improve the Service, to comply with applicable law, or as part of a merger, acquisition, or asset sale (with notice to users).
We do not use Google user data for serving advertisements.
We do not allow humans to read Google user data unless we have your affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and anonymized and used for internal operations.

The scopes Swaad requests surface only your name, primary email, profile picture URL, and Google account id. We do not request access to Gmail, Drive, Calendar, or Contacts unless you explicitly initiate a feature that needs it and approve the additional scope.

5. How we share information

Within your workspace: content is visible to members of the same workspace.
Service providers: hosting infrastructure, Razorpay for payments, and email delivery — each acting on our instructions.
Legal: where required by applicable law or to protect rights, safety, and the integrity of the Service.

6. Data retention

We keep account and workspace data while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where retention is required by law. Telemetry and request logs are retained for no more than 90 days.

7. Security

Data is encrypted in transit with TLS. API keys are stored as bcrypt hashes, never in plaintext. Our infrastructure runs on hardened hosts behind Cloudflare. No system is perfectly secure, but we work to protect your data with industry-standard measures.

8. Your rights

You may request access to, correction of, export of, or deletion of your personal data. Email support@dhumketu.space from your account address and we will respond within 30 days.

9. Children

Swaad is a business tool and is not directed to children under 13. We do not knowingly collect personal data from children.

10. International transfers

Swaad is operated from India. By using the Service, you understand that your data may be processed in India and other locations where our service providers operate.

11. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide reasonable notice.

12. Contact

Questions about this policy? Email support@dhumketu.space.