Privacy Policy

Last updated 18 October 2026

This policy explains what personal data Filljar Private Limited ("Filljar", "we") collects when you use the Filljar website and apps, why we collect it, how long we keep it and the rights you have under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. We collect only what we need to deliver your orders.

Who we are

Filljar is a delivery platform that connects you with restaurants and Filljar-operated stores in Chennai and Bengaluru. For the personal data described here, Filljar is the Data Fiduciary. Restaurants receive only what they need to prepare your order (items, instructions and order number). Riders receive your name and delivery address.

Data we collect

Account: mobile number (your login), name, and email if you add one.
Addresses: saved delivery addresses, map pin, landmark, and receiver name and phone when you order for someone else.
Orders: items, bills, coupons used, delivery instructions, ratings, and support conversations.
Location: your chosen delivery area. If you tap Use my current location, your browser shares your position once; we store only the area and pin you confirm.
Saved with your account: favourite restaurants, your cart (so it follows you between the website and the app), your language choice, and the map points where you asked us to tell you when we start delivering or when an item is back in stock.
Print files: the PDFs and photos you upload for Printing & Photocopy.
Device and security: IP address, browser or app version, session records, login attempts and, in the app, a push notification token, used to keep your account safe and to stop abuse.
Payments: today orders are cash on delivery. When online payments launch, card and UPI details will be handled by a licensed payment gateway; Filljar will not store full card numbers.

How we use it

To create your account, verify your number with a one-time code and keep you logged in.
To check whether we deliver to your address, show nearby restaurants and stores, price your order and deliver it.
To send order updates by in-app notification and, where required, SMS.
To provide support, process cancellations and refunds, and handle grievances.
To prevent fraud and abuse, such as fake orders or repeated cash on delivery refusals.
To meet legal duties, including GST invoicing and record keeping.
With your separate consent only: offers and marketing messages, and optional analytics on the website.

How long we keep it

Account and addresses: while your account is active. Deleted when you delete your account.
Order and invoice records: for the period required by tax and accounting law, with personal details removed after account deletion.
Favourites, saved cart, language and Notify me points: while your account is active. Deleted when you delete your account.
Print files: Files are private and deleted 7 days after your order. Files uploaded but never ordered are deleted when you delete your account.
Push notification tokens: until you log out of the app or delete your account.
Account deletion reason (if you give one): kept with the deletion record, which no longer holds your name or number.
One-time codes: expire in 5 minutes; records are purged on a rolling basis.
Support conversations: up to 3 years after closure, to handle disputes.
Security logs: up to 180 days, unless needed for an investigation.

Your rights

Under the DPDP Act you can:

Get a summary of the personal data we hold about you and how it is used.
Correct or update your data. Most of it you can edit yourself in your account.
Erase your data by deleting your account from Account, Security and data.
Nominate another person to exercise your rights in case of death or incapacity.
Raise a grievance with us, and if unresolved, with the Data Protection Board of India.

Write to grievance@filljar.in from your registered email, or raise a request in the app. We respond within 30 days. See Grievance Redressal.

Security

Sessions use random tokens stored only in hashed form. The website keeps your session in a secure, httpOnly cookie that page scripts cannot read. Data travels over HTTPS. Access inside Filljar is limited by role and logged. If a breach affects you, we will inform you and the Data Protection Board as the law requires.

Children

Filljar is for people aged 18 and over. We do not knowingly collect data from children.

Changes to this policy

If we make material changes, we will tell you in the app or on the website before they take effect.

Privacy Policy

Last updated 18 October 2026

Who we are

Data we collect

Account: mobile number (your login), name, and email if you add one.
Addresses: saved delivery addresses, map pin, landmark, and receiver name and phone when you order for someone else.
Orders: items, bills, coupons used, delivery instructions, ratings, and support conversations.
Location: your chosen delivery area. If you tap Use my current location, your browser shares your position once; we store only the area and pin you confirm.
Saved with your account: favourite restaurants, your cart (so it follows you between the website and the app), your language choice, and the map points where you asked us to tell you when we start delivering or when an item is back in stock.
Print files: the PDFs and photos you upload for Printing & Photocopy.
Device and security: IP address, browser or app version, session records, login attempts and, in the app, a push notification token, used to keep your account safe and to stop abuse.
Payments: today orders are cash on delivery. When online payments launch, card and UPI details will be handled by a licensed payment gateway; Filljar will not store full card numbers.

How we use it

To create your account, verify your number with a one-time code and keep you logged in.
To check whether we deliver to your address, show nearby restaurants and stores, price your order and deliver it.
To send order updates by in-app notification and, where required, SMS.
To provide support, process cancellations and refunds, and handle grievances.
To prevent fraud and abuse, such as fake orders or repeated cash on delivery refusals.
To meet legal duties, including GST invoicing and record keeping.
With your separate consent only: offers and marketing messages, and optional analytics on the website.

How long we keep it

Account and addresses: while your account is active. Deleted when you delete your account.
Order and invoice records: for the period required by tax and accounting law, with personal details removed after account deletion.
Favourites, saved cart, language and Notify me points: while your account is active. Deleted when you delete your account.
Print files: Files are private and deleted 7 days after your order. Files uploaded but never ordered are deleted when you delete your account.
Push notification tokens: until you log out of the app or delete your account.
Account deletion reason (if you give one): kept with the deletion record, which no longer holds your name or number.
One-time codes: expire in 5 minutes; records are purged on a rolling basis.
Support conversations: up to 3 years after closure, to handle disputes.
Security logs: up to 180 days, unless needed for an investigation.

Your rights

Under the DPDP Act you can:

Get a summary of the personal data we hold about you and how it is used.
Correct or update your data. Most of it you can edit yourself in your account.
Erase your data by deleting your account from Account, Security and data.
Nominate another person to exercise your rights in case of death or incapacity.
Raise a grievance with us, and if unresolved, with the Data Protection Board of India.

Write to grievance@filljar.in from your registered email, or raise a request in the app. We respond within 30 days. See Grievance Redressal.

Security

Children

Filljar is for people aged 18 and over. We do not knowingly collect data from children.

Changes to this policy

If we make material changes, we will tell you in the app or on the website before they take effect.

Privacy Policy

Who we are

Data we collect

How we use it

Consent and your choices

Who we share it with

How long we keep it

Your rights

Security

Children

Changes to this policy

Privacy Policy

Who we are

Data we collect

How we use it

Consent and your choices

Who we share it with

How long we keep it

Your rights

Security

Children

Changes to this policy