How Droooly handles and protects your data

Last updated: May 19, 2026

This policy explains what information we collect, why we collect it, how we use it, when we share it, and how you can request account or data deletion.

1. Who we are

Droooly is operated by Droooly Labs Private Limited. Droooly is a food services marketplace that helps customers discover and book catering, private chef, restaurant experience, and related food service providers.

2. Information we collect

We may collect your name, email address, mobile number, login details, delivery or event address, booking details, guest count, food preferences, dietary requirements, payment status, support messages, device information, browser information, usage activity, and communication preferences. For partners, we may also collect business profile details, service areas, menu or package details, bank payout details, tax details, KYC documents, licences, and verification information.

3. How we use your information

We use your information to create and manage accounts, process bookings, request quotes, confirm orders, collect payments, manage refunds, verify partners, schedule payouts, provide customer support, send service updates, prevent fraud or misuse, improve marketplace quality, and comply with legal, tax, accounting, safety, and regulatory requirements.

4. Bookings, quotes, and active orders

When you create a booking, quote request, or order, we store the information required to complete the service. If an order is active, pending, disputed, cancelled, refundable, or legally required for records, we may retain the related booking, payment, invoice, refund, support, and settlement information even if you request account deletion. This helps us protect customers, partners, and Droooly from incomplete fulfilment, fraud, disputes, charge backs, tax issues, or payout errors.

5. How account deletion works

You can request deletion from the app through Account → Delete Account, or by contacting us from the Contact Us page. When deletion is requested, we will deactivate or delete your account profile and remove personal data that is no longer required. Some data may be retained where required for active orders, legal compliance, tax records, fraud prevention, dispute resolution, payment reconciliation, partner payout, safety, or marketplace integrity.

6. What may be deleted

Subject to legal and operational requirements, deletion may include your profile details, saved preferences, saved addresses, non-essential communication preferences, and inactive account data. Where possible, we may anonymise or de-identify historical marketplace records instead of deleting the entire transaction record.

7. What may be retained

We may retain invoices, payment references, refunds, booking history, tax records, support tickets, partner KYC records, payout records, agreement records, audit logs, fraud prevention records, and dispute-related information for as long as necessary under applicable law, accounting requirements, platform safety, or legitimate business needs.

8. Payments and payouts

Droooly may use third-party payment processors to collect customer payments, process deposits, issue refunds, and manage partner payouts. We do not intend to store full card, UPI, or sensitive payment credentials on our own systems. Payment providers may process information according to their own privacy and security policies.

9. Sharing with customers, partners, and providers

We share only the information needed to operate the marketplace. For example, customers may share event details with partners, partners may receive booking details needed to fulfil an order, and Droooly may use service providers for hosting, analytics, communication, payment, verification, security, and support. We may also disclose information when required by law, court order, regulatory authority, safety investigation, or fraud prevention need.

10. Communications

We may contact you by email, SMS, WhatsApp, phone, push notification, or in-app message for OTP verification, booking updates, quote updates, payment status, support, refunds, cancellations, partner onboarding, payout updates, policy updates, and important service announcements. You may opt out of promotional messages where supported, but transactional messages may still be sent.

11. Cookies, analytics, and device data

We may use cookies, analytics tools, logs, and similar technologies to keep Droooly secure, remember preferences, understand usage, improve performance, detect abuse, and improve the user experience. You can control some cookie or tracking settings through your browser or device settings.

12. Data security

We use reasonable administrative, technical, and organisational safeguards to protect information against unauthorised access, misuse, loss, alteration, or disclosure. However, no internet-based system can be guaranteed to be fully secure. You are responsible for keeping your login credentials and device access secure.

13. Your rights and choices

You may request access, correction, update, deletion, or withdrawal of consent where applicable. We may need to verify your identity before processing such requests. Certain requests may be limited where retention is required for active orders, legal compliance, taxation, fraud prevention, security, dispute handling, or marketplace integrity.

14. Children’s privacy

Droooly is not intended for use by children without parental or guardian involvement. If we learn that we have collected personal data from a child without appropriate consent, we will take reasonable steps to delete or restrict such information.

15. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. Continued use of Droooly after an update means you accept the revised policy.