Privacy Policy
How Servly collects, uses, shares and protects personal data.
1. Who We Are
VortekAI Solutions ("Servly", "we", "us") runs Servly: this website, the ordering app that diners open from a restaurant's QR code, and the dashboard that restaurant staff use.
For the purposes of the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, Servly is a data fiduciary for the personal data it decides how to use.
Each restaurant is a data fiduciary for the personal data it uses in its own operations, such as the orders it serves.
2. Data We Collect
| Category | When | Purpose |
|---|---|---|
| Demo request (website visitors): name, phone, email, restaurant name, city, restaurant type | When you submit the demo form | To contact you about a demo |
| Order details (diners): items, table, notes, dietary and allergen choices on the order | When you place an order, with or without an account | To send your order to the restaurant and track it |
| Email address (diners) | Only if you choose to sign in to save your orders (one-time code sent by email). Ordering as a guest needs no account. | Sign-in, receipts and account notices |
| Account details (diners): name, contact details you give us, dietary preferences, allergens, order history, any rating or review you leave | When you create or use an account | To run your account and personalise your menu within Servly |
| Staff details: name, email, phone if given, role, sign-in devices, and a record of billing and security actions | When a restaurant adds you or you use the dashboard | Sign-in, access control and accountability |
| Consent records: what you accepted, when, IP address and browser | When you accept terms, cookies or marketing | To show what you agreed to |
| Technical data: IP address, browser and device type, error reports, cookies and device storage | When you use the website or apps | To keep you signed in, secure the service and fix errors |
We do not collect credit card, debit card, UPI or bank account details from diners (you pay the restaurant directly by cash, UPI or card; Servly never processes your payment). Restaurant staff record how a bill was paid.
3. How We Use It
- To take your order, pass it to the restaurant and show its status.
- To sign you in and send receipts and account notices.
- To personalise your menu within Servly.
- To keep the service secure and prevent fraud and misuse.
- To find and fix errors and improve the service, using aggregated or de-identified data where we can.
- To answer demo requests and support messages.
- To keep the records that tax and other laws require.
Unless you turn it off, Servly and the restaurants you order from may send you offers and updates by email, and by SMS or WhatsApp where you have given those details, about restaurants you have ordered from. Every message carries an unsubscribe link, and you can switch each channel off at any time in your profile or by writing to help@goservly.com. Turning marketing off never affects your orders.
We do not sell your personal data. We do not share your contact details with restaurants for their own marketing outside Servly, and we do not send you marketing messages you cannot turn off.
4. Sharing
- The restaurant where you order receives your order, any dietary and allergen notes, and your name and contact details if you signed in.
- Service providers that work for us: cloud hosting; content delivery, security and website hosting; storage and backups; email delivery and our email inbox; error monitoring. They may use the data only to provide their service to us.
- Authorities, when the law requires it or to protect our users and service.
Each restaurant using Servly is contractually required to: use your data only for order fulfilment, not share it with third parties, not send you marketing except through Servly, and only while your marketing setting is on.
Restaurant and order data is stored on servers in Mumbai, India. Our content delivery, backup storage and error-monitoring providers can store some data outside India.
5. Retention
We keep personal data while the purpose we collected it for lasts, and for as long as tax, accounting or other laws require. After that we delete it or anonymise it. When you delete your account, deletion takes effect after a 7-day waiting period in which you can cancel. Invoices and order records that the law requires us or the restaurant to keep are kept without your name and contact details.
6. Security
We use reasonable security practices, including:
- Encryption of data in transit.
- Encryption of stored data at rest by our hosting provider.
- Isolation of each restaurant's data at the database level.
- Rate limiting to prevent abuse.
- Audit logging of billing and security-sensitive actions.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs, we will notify the authorities and affected users as required by applicable law.
7. Your Rights
To use any of these rights, email help@goservly.com. We may need to confirm your identity first. If you are not satisfied with our answer, you may complain to the Data Protection Board of India when the Board is operational.
8. Children
You must be 18 or older to create an account. If you are under 18, use Servly only with a parent's or guardian's consent. If we learn that we hold a child's data without that consent, we will take steps to delete it.
9. Changes to This Policy
We may change this policy by posting a new version on this page with its effective date. If you keep using Servly after that date, you accept the new version. Where a change is material, we will also tell you in the app or by email where we have your address.
10. Grievance Officer
11. Governing Law
This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Subject to your rights under those laws, the courts at Ahmedabad, Gujarat have jurisdiction.