1. Who We Are
Brocoly operates a SaaS-enabled meal subscription management platform accessible via our mobile application and affiliated web portals. Brocoly connects customers with independent meal subscription companies ("Meal Providers") and facilitates subscription management, schedule cutoffs, meal selection, and payment infrastructure.
2. Information We Collect
We only collect data strictly necessary to fulfill your daily meal orders, administer your subscription cycle, and guarantee secure transactions.
Full name, email address, and mobile phone number provided upon profile registration.
Encrypted login credentials via email/password, Google Sign-In, or Apple Sign-In authentication.
The unique company or kitchen code used to access your designated Meal Provider's menu.
Physical delivery address, landmark, and building instructions for day-to-day meal drop-off.
Food preferences, meal customizations, and dietary restrictions or allergies you explicitly select.
Payments are processed directly by Razorpay. Brocoly never handles or stores raw card or banking credentials.
3. How We Share Your Information
We strictly share your name, contact details, delivery address, dietary preferences, and meal schedule with the specific Meal Provider you have subscribed to. They use this information to prepare and deliver your meals accurately.
Shared strictly with your chosen kitchen partner for daily cooking rosters, portioning, allergy precautions, and local logistics.
Encrypted payment transactions processed under RBI-approved PCI-DSS Level 1 infrastructure. Brocoly receives only transaction status tokens.
Used solely for secure user authentication, push notification delivery (daily meal cutoff reminders), and real-time backend synchronization.
4. Data Retention
We retain your account data for as long as your profile remains active. We adhere strictly to statutory retention and deletion periods defined by Indian laws.
Upon requesting account deletion, all personal identifiers, addresses, and saved meal preferences are permanently purged from active systems within 30 days.
Historical transaction invoices and financial payment logs are archived for 7 years in compliance with Indian GST, Income Tax, and auditing regulations.
5. Your Rights Under DPDP Act 2023
Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), you are recognized as a Data Principal and possess specific statutory rights regarding your personal data.
Request an export of all personal data held about you and a summary of third-party processing.
Update inaccurate contact info or request complete erasure of your data when no longer required.
Nominate an individual to exercise data rights on your behalf in the event of death or incapacity.
6. Contact & Grievance Officer
If you have questions, concerns, or grievances regarding how your personal data is processed, or wish to exercise your rights under the DPDP Act 2023, please contact our designated Grievance Officer.