Privacy Policy

1. Introduction

Welcome to FryFly (“FryFly”, “we”, “our”, or “us”), operated at https://fryfly.shop. We are committed to protecting the privacy and security of our merchant partners, restaurant owners, and end-users who access our digital menus and utility tools.

This Privacy Policy outlines how we collect, use, disclose, and protect personal and business information in accordance with the Indian Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act (DPDPA), 2023.

2. Information We Collect

We only collect data necessary to provide and maintain our services:

• Restaurant & Menu Information: Restaurant name, business address, cuisine type, menu categories, dish names, descriptions, item pricing, and uploaded dish/logo images.
• Merchant Contact Information: Owner/manager phone number and email address provided during checkout. This information is strictly utilized to send your private menu edit link, transaction invoice, and critical service notifications.
• Client-Side Free Tools Data: For tools such as our UPI QR generator, WiFi QR generator, and photo compressors, all image processing and string encoding occur entirely inside your local browser. No UPI IDs, passwords, or personal photos processed through these free tools are uploaded or stored on our servers.
• Technical & Log Data: Internet Protocol (IP) address, browser type, device operating system, request timestamps, and referrer headers collected automatically for security logging and DDoS mitigation.

4. How We Use Your Information

• To generate and host dynamic, mobile-friendly digital menus accessible via QR code.
• To issue your secure, authenticated secret menu edit link.
• To verify payments and prevent fraudulent chargebacks.
• To provide customer support and respond to inquiries sent to our support desk.
• To monitor infrastructure stability, page speed, and edge network uptime.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal or business data to third-party advertisers. We only disclose necessary data to verified operational infrastructure partners:

• Razorpay: Payment processing and transaction verification.
• Supabase Inc.: Encrypted cloud database and asset storage for public menu data.
• Upstash: Serverless rate-limiting and DDoS mitigation.
• Legal Authorities: Only when strictly mandated by applicable Indian law, court order, or governmental regulation.

6. Cookies & Local Storage

We use minimal cookies and local browser storage (such as localStorage.setItem('fryfly_lang')) strictly to remember your language preference (English, Hindi, or Hinglish). We do not deploy third-party advertising tracking cookies.

7. Data Security & Retention

We implement industry-standard physical, technical, and managerial safeguards including HTTPS/TLS 1.3 encryption, least-privilege database access policies (Row-Level Security), and rate-limiting to prevent unauthorized access. Restaurant menu data is retained for the lifetime of your active menu or until you request its deletion.

8. Your Rights & Data Deletion

You have the right to access, update, or permanently delete your restaurant menu and associated contact data at any time. You can edit your menu directly using your secret edit token, or email us at support.fryfly@gmail.com to request immediate removal of your records.