Privacy Policy

Last updated 20 October 2026. This policy is written for the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

Who we are

NearbyTop10 (“we”, “us”) is run by Renforcers Media and Advertising, Chikhali Pune. We decide why and how your personal data is used. Questions or requests: salveamol@gmail.com (Grievance Officer: Amol).

What we collect, and why

If you only browse

We do not ask you to sign in. We count visits in a privacy-friendly way: a one-way code made from your network address and browser that changes every day, kept for 2 days only to avoid double-counting. We keep only daily totals (for example “120 views of a restaurant”) for up to 13 months. We do not store your IP address in those totals, and we use no advertising or cross-site tracking cookies. If you tap “Use my current location”, your phone’s position is sent with that request to rank nearby places; we do not store it.

If you order delivery, book a table or send an event enquiry

Your name, phone number, delivery address and location (for delivery), notes, and the order or booking details are saved and shared with the restaurant you chose, so they can serve you. If that restaurant uses a delivery partner or its own riders, the delivery details (name, phone, address, items) are shared with them for that order. You do not need an account.

If you create a foodie account

Your name, username (public), email (never shown), password (stored only as a one-way hash), optional city, bio and photo, and what you post: reviews, ratings, dishes, photos, reel links, likes, follows and saved places. Reviews, photos, your username, level and score are public. Likes and follows between users are used to compute foodie levels.

If you are a restaurant

Your email, phone, business name, FSSAI number and what you publish (profile, menu, photos, offers, events, coupons), plus orders, bookings and enquiries you receive, riders you add, and delivery-partner credentials (stored encrypted). Restaurant owners can see insights about their own page (counts, not who visited).

If you are a marketing partner

Your name, phone, email, city, PAN, and the UPI ID or bank account you give us to receive commission (bank details are stored encrypted and shown to our team only when making a transfer), plus the commission and payout records. Partners see the name, city, package and status of restaurants they brought, not their contact details.

Package payments

When a restaurant pays for a package by cash or cheque, we keep the payment record and receipt (amount, date, mode, cheque number and bank) for accounting and legal needs, normally for at least 8 years.

Security records

To protect accounts we keep short records of sign-ups, password resets, e-mail confirmations and, for administrators, a log of admin actions with a shortened one-way marker of the source network (kept up to 13 months). Emails we send are kept for at most 7 days in our outbox if no mail provider is connected.

Cookies and similar storage

Only what is needed to work: a secure sign-in cookie if you sign in as a foodie, restaurant or administrator (HTTP-only, not readable by scripts), and settings saved in your browser such as your chosen city. No advertising cookies. Block or clear them any time in your browser; sign-in then stops working.

Who else touches your data

• Restaurants you order from or book with (above).
• Hosting and email providers that run this site and send our emails.
• Google Fonts: your browser loads typefaces from Google, which therefore sees your network address and browser type.
• OpenStreetMap contributors: some listings are built from OpenStreetMap data (© OpenStreetMap contributors, ODbL). That data is about businesses, not about you.
• Authorities, if the law requires it.

We do not sell your personal data.

How long we keep it

Account data until you delete the account or ask us to. Orders, bookings and enquiries as long as the restaurant needs them for its records and as the law requires. Daily visit totals and admin audit records up to 13 months. Reviews you post stay public until you or we remove them.

Your rights

You can ask to see, correct or erase your personal data, withdraw consent, or complain about how it is handled, by writing to salveamol@gmail.com. Foodies can edit their profile, delete their reviews and delete their whole account (Profile → Delete my account, which removes everything they posted) in the app; restaurants can ask us to close their account. We aim to reply within 30 days. If you are not satisfied you may approach the Data Protection Board of India.

Children

NearbyTop10 is not meant for people under 18, and we do not knowingly create accounts for them.

Security

Passwords are hashed, sign-in cookies are protected, restaurant delivery keys are encrypted and administrators can use two-factor sign-in. No system is perfectly safe; if a breach affects you we will tell you and the authorities as the law requires.

Changes

If we change this policy in a way that matters, we will update the date above and, for account holders, tell you in the app or by email.