Fgito

Welcome to Novasie Technologies Pvt. Ltd. (Fgito) ("Company," "we," "us," or "our"). The Privacy Policy govern your access to and use of our platform, which includes our website, mobile application and related services (collectively, the "Platform"). The Platform connects users who seek to purchase home-cooked food ("Customers") with independent individuals who prepare and sell such food from their respective places ("Cooks").

By accessing, browsing, or using the Platform in any way, you ("User," "you," or "your") agree to be bound by these terms of Privacy Policy. If you do not agree to these Terms, you must immediately cease use of the Platform.

This Privacy Policy ("Policy") is published in compliance with Section 43A of the Information Technology Act, 2000, Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable provisions of Indian law, and constitutes a legally binding agreement between the User and the Company, which owns and operates the Platform

By accessing, registering on, or using the Platform, the User expressly acknowledges and agrees to be bound by the terms of this Policy and consents to the collection, storage, use, processing, transfer, and disclosure of his/her/its information in the manner set out herein.

Scope

This Privacy Policy delineates the practices and procedures adopted by the company and its affiliates in relation to the collection, use, storage, disclosure, and overall processing of personal information pertaining to individuals who interact with its Platform and Services. The applicability of this Policy extends, without limitation, to customers, merchant partners, delivery and service partners, users of Novasie Technologies Pvt. Ltd. (Fgito) digital interfaces (including websites and mobile applications), participants in events organised or facilitated by Novasie Technologies Pvt. Ltd. (Fgito), as well as all categories of personnel, namely employees, contractors, interns, consultants, and third-party associates.

DEFINITIONS

"Company" shall mean Novasie Technologies Pvt. Ltd. (Fgito), having its registered office at …………….., which owns and operates the Platform.

"User" shall mean any natural or juristic person who accesses, uses, registers with, or transacts on the Platform in any manner whatsoever.

"Personal Information" shall mean any information which directly or indirectly identifies an individual, including but not limited to name, mobile number, email address, residential address, date of birth, gender, identification particulars, and such other information as may be considered personal under law.

"Sensitive Personal Data or Information (SPDI)" shall have the meaning assigned under Rule 3 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and shall include passwords, financial information such as bank account details, credit/debit card details, UPI credentials, wallet credentials, biometric information, and such other information as may be notified from time to time.

"Processing" shall mean collection, recording, storage, retrieval, transmission, use, disclosure, erasure, or destruction of data.

"Consent" shall mean free, specific, informed, unconditional, and unambiguous agreement, obtained through affirmative action, signifying the User's willingness for the Processing of Personal Information or SPDI by the Company.

COLLECTION OF INFORMATION

Personal Information:

For the purposes of this Policy, Personal Information shall mean any data that pertains to an identified or identifiable natural person. Such information may include data voluntarily furnished by you, data generated or inferred through your engagement with the Services, or data procured from legitimate third-party sources, which—either independently or when combined with other information lawfully accessible to us—enables your direct or indirect identification.

Other Information:

Other Information shall encompass data concerning your access to, and utilisation of, the Services which, in isolation, may not directly establish your identity, but which is collected and processed in association with your account, device, or activities. Such information includes particulars relating to your internet connectivity, device(s) and equipment used to access our Services, and behavioural insights concerning your patterns of use, navigation, and interactions with the Services.

Modes of Collection:

Directly from you at the time of registration, communication, or transaction;
Automatically during your interaction with our Services through cookies, log files, and tracking technologies;
Indirectly, through authorised third-party sources operating in compliance with applicable law.

Information Voluntarily Provided by the User:

Identification and Contact Information: Full name, gender, date of birth, nationality, government-issued ID particulars, phone numbers, email addresses, residential/delivery addresses, and any other identification or contact details required for account creation, verification, or communication.
Payment and Financial Information: Bank account details, debit/credit card details, UPI IDs, wallet credentials, and related financial data required for payments, billing, refunds, or other financial reconciliations.
User-Generated Content and Communications: Feedback, reviews, survey responses, multimedia uploads, or any other information voluntarily submitted for service evaluation, promotions, or dispute resolution.
Optional and Ancillary Information: Any additional details for service personalization, loyalty programs, promotions, or engagement initiatives (e.g., dietary preferences, health or allergy information).

All such information shall be retained and processed in accordance with applicable laws (including the Information Technology Act, 2000 and its rules) and secured using reasonable safeguards to protect confidentiality and integrity.

Information Collected Automatically:

Technical and Device Information: IP address, device identifiers, browser type/version, operating system, device model, screen resolution, and system parameters.
Geolocation and Usage Data: Location information, browsing patterns, frequency/duration of visits, pages viewed, transaction history, and service preferences.
Tracking and Analytics Technologies: Data from cookies, beacons, local storage, or other tools for analytics, personalization, and service optimization, used in compliance with applicable law.

PURPOSE AND LAWFUL BASIS FOR COLLECTION AND PROCESSING OF USER INFORMATION

The Company collects, stores, and processes information pertaining to the User solely for legitimate, lawful, and defined purposes necessary for the provision of services through the Platform, and in accordance with applicable laws, regulations, and judicial pronouncements. The specific purposes include, without limitation:

Registration, Account Management, and Authentication:

To facilitate the creation of user accounts, enable secure registration, verify User identity, authenticate access credentials, maintain account integrity, and manage account settings in a secure and reliable manner.

Order Processing and Service Delivery:

To process, confirm, and fulfill orders for home-cooked food placed by the User through the Platform, including coordination with third-party vendors, delivery personnel, and logistics partners to ensure timely and accurate delivery of goods and services.

Payment Processing and Financial Compliance:

To process payments, generate invoices, maintain accurate billing records, facilitate refunds or adjustments, and comply with applicable taxation, accounting, and financial reporting obligations under the law.

Personalization and Service Enhancement:

To analyse User preferences, provide personalized food recommendations, enhance the overall User experience, improve service offerings, and ensure that the Platform remains responsive to User needs and behavioural patterns.

Fraud Prevention, Risk Management, and Dispute Resolution:

To undertake measures for the detection, investigation, and prevention of fraudulent or unauthorized activities, monitor operational and transactional risks, and resolve disputes arising in connection with Platform usage or commercial transactions.

Communication and Notifications:

To send service-related notifications, alerts, reminders, updates, and promotional communications, subject to the User's consent or opt-out preferences, ensuring that communication is relevant, lawful, and in accordance with User rights.

Statutory Compliance and Legal Obligations:

To comply with applicable statutory obligations, regulatory requirements, and legal directives, including responding to lawful requests from government authorities, judicial bodies, or other competent agencies, in a manner consistent with principles of due process and the protection of User rights.

Ancillary and Operational Purposes:

To perform ancillary functions necessary for business operations, such as analytics, research, service improvement, and internal administrative requirements, while ensuring that such processing is proportionate, lawful, and aligned with the principles of data protection and confidentiality.

COOKIES AND TRACKING TECHNOLOGIES

The Company, through the Platform, employs the use of cookies, pixel tags, web beacons, log files, device identifiers, and other allied tracking technologies (hereinafter collectively referred to as "Cookies and Tracking Technologies"), which are deployed for lawful, legitimate, and limited purposes, namely:

for authentication, verification, and identification of Users so as to secure their sessions and prevent unauthorised access to the Platform;
for recording, storing, and retaining User preferences, settings, and customised choices with a view to enhancing convenience and user experience;
for optimisation of content, interface design, and delivery of personalised recommendations based upon User interactions and preferences;
for undertaking statistical analysis, research, and monitoring of traffic, trends, and usage patterns in order to improve functionality, reliability, and overall performance of the Platform;
for detecting, preventing, and addressing system vulnerabilities, fraudulent transactions, misuse, or security-related incidents; and
for facilitating advertisement delivery, retargeting, and promotional communications, subject always to the User's explicit consent and in compliance with applicable legal provisions.

The Company expressly clarifies that certain Cookies deployed on the Platform may be:

Session Cookies, which are temporary in nature and are automatically deleted upon closure of the browser or application;
Persistent Cookies, which remain stored on the User's device for a predetermined duration or until such time as they are manually deleted; and
Third-Party Cookies, which may be placed by service providers, analytics partners, or advertising networks engaged by the Company, subject to the terms of their respective privacy policies.

The User is hereby apprised that the management of Cookies and Tracking Technologies remains within the control of the User, and the User may, at his or her discretion, enable, restrict, disable, or delete such Cookies by adjusting the settings of his or her browser, device, or application. However, the User expressly acknowledges that disabling or restricting certain Cookies may render portions of the Platform inoperative, inaccessible, or impaired, and the Company shall not be liable for any resultant limitation in functionality.

By continuing to access, browse, or use the Platform without disabling Cookies and Tracking Technologies, the User shall be deemed to have granted free, informed, and explicit consent to the collection, storage, and use of his or her information through such technologies, subject always to the terms of this Privacy Policy, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023, and other laws in force.

The Company undertakes that any use of Cookies and Tracking Technologies shall be strictly proportionate, purpose-specific, and compliant with applicable statutory obligations, and further assures that no Cookies shall be employed to collect sensitive personal data or information of Users unless explicitly consented to by them.

DISCLOSURE AND TRANSFER OF INFORMATION

The Company affirms that it shall not disclose, share, disseminate, or transfer any Personal Information or Sensitive Personal Data or Information (SPDI) of the User except in strict compliance with applicable law and only under the circumstances outlined herein.

Disclosure to Service Providers

The Company may provide Information to authorised service providers, contractors, or vendors such as payment gateways, logistics partners, IT infrastructure providers, cloud vendors, auditors, and consultants, for purposes necessary to perform services on behalf of the Company. Such entities shall be contractually bound to process Information only in accordance with lawful instructions and with adequate safeguards.

Disclosure to Affiliates and Business Partners

The Company may share Information with its affiliates, subsidiaries, or trusted business partners for joint services, promotional campaigns, loyalty programmes, or other value-added offerings. Such disclosure shall only be made with the User's prior, explicit, and informed consent.

Disclosure to Government Authorities

The Company shall disclose Information to government authorities, law enforcement agencies, regulatory bodies, or judicial/quasi-judicial forums where disclosure is required under law, regulation, or a lawful order of a competent authority.

Corporate Restructuring

In the event of merger, acquisition, restructuring, sale, or transfer of business, User Information may form part of the transferred assets, provided that the transferee is bound by obligations no less stringent than those set forth in this Policy.

Cross-Border Transfers

Any transfer of Information outside India shall be in strict compliance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and other applicable laws. Transfers will be made only to jurisdictions ensuring adequate protection and subject to contractual safeguards such as standard contractual clauses or binding corporate rules.

User Consent

Except as expressly provided above, no disclosure or transfer of Information shall occur without the User's free, prior, and informed consent, which may be withdrawn at any time in accordance with this Privacy Policy and applicable law.

Record of Disclosure

The Company shall maintain records of disclosures and transfers, including cross-border transfers, as required under law and furnish the same to competent authorities upon lawful demand.

DATA RETENTION

General Principle of Retention

The Company shall retain Personal Information and SPDI only for as long as is reasonably necessary for the purposes for which it was collected, or as mandated by applicable law, regulation, or legitimate business requirements.

Categories and Retention Periods

Account and Registration Data: Retained for the duration of the User's account and for a reasonable period thereafter.
Transactional and Financial Records: Retained as mandated under applicable tax and company laws.
Communication Records: Retained as needed for dispute resolution and compliance.
Operational and Security Logs: Retained for cybersecurity, fraud detection, and monitoring purposes.
Marketing and Promotional Data: Retained until consent is withdrawn or for a reasonable period to demonstrate compliance.
Sensitive Personal Data: Retained only for as long as necessary for the specific transaction or service, unless law requires longer retention.

Extended Retention

The Company may retain Information beyond the usual period to comply with statutory obligations, respond to investigations, enforce legal rights, detect or prevent fraud, or preserve business records for audit or continuity purposes, provided that such retention is proportionate and lawful.

Secure Deletion and Anonymisation

Once retention periods expire, the Company shall securely delete, destroy, anonymise, or archive Information using industry-standard measures to prevent unauthorised access or misuse.

Periodic Review

The Company shall periodically review retained Information to ensure it remains necessary, proportionate, and lawful, and will delete or anonymise Information no longer required.

User Rights Relating to Retention

Request deletion of Information no longer necessary for its original purpose.
Withdraw consent for retention where processing was based on it.
Seek clarification on retention timelines for specific Information categories.
Request anonymisation where deletion is restricted by statutory obligations.

Record-Keeping Obligation

The Company shall maintain records of retention, deletion, anonymisation and archival in accordance with applicable law and provide the same to competent authorities upon lawful request.

DATA SECURITY MEASURES

General Obligation of Security

The Company affirms its commitment to safeguarding the confidentiality, integrity, and availability of all Personal Information and Sensitive Personal Data or Information, and undertakes to implement and maintain reasonable security practices and procedures, as mandated under Section 43A of the Information Technology Act, 2000, Rule 8 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023, and other laws for the time being in force.

Technical Safeguards

Encryption of data at rest and in transit using industry-standard protocols;
Secure socket layer (SSL)/transport layer security (TLS) for communication channels;
Firewalls, intrusion detection and prevention systems, and anti-malware protections;
Regular application of security patches, updates, and vulnerability management;
Anonymisation, pseudonymisation, and tokenisation where feasible, particularly in respect of Sensitive Personal Data or Information.

Organisational and Access Controls

Role-based access controls to ensure that only authorised personnel have access to Information on a "need-to-know" basis;
Multi-factor authentication, password protection, and session management;
Employee confidentiality agreements and periodic training on data protection obligations;
Designation of a Grievance Officer/Data Protection Officer, as mandated under applicable law, to oversee security and compliance.

Monitoring and Audits

The Company undertakes periodic internal and external audits, penetration testing, and security risk assessments to evaluate, monitor, and strengthen its security framework, and maintains logs and records of such activities in accordance with statutory requirements.

Incident Management

In the event of any actual, suspected, or potential security breach, the Company shall follow its incident response plan, which includes prompt investigation, mitigation, documentation, and, where required under law, notification to the affected Users and competent authorities.

Limitation of Liability

Notwithstanding the implementation of the above measures, the User acknowledges and accepts that transmission of Information over the Internet, electronic networks, or digital systems is inherently susceptible to risks of interception, unauthorised access, or compromise. Accordingly, while the Company exercises all reasonable care and diligence, it disclaims liability for any unauthorised access, breach, or disclosure that occurs beyond its reasonable control or despite the adoption of industry-standard safeguards.

DATA OF MINORS

Applicability to Minors

The Company expressly clarifies that its Platform and Services are not directed towards, nor intended for, individuals below the age of eighteen (18) years ("Minors"), and that it does not knowingly solicit, collect, process, or store Personal Information or Sensitive Personal Data or Information of Minors for the purposes of account creation, registration, or general usage of the Platform.

Exceptional Circumstances

In limited cases, services on the Platform may be availed by or on behalf of Minors (e.g., booking tickets for family-oriented events, or delivery of food items intended for household consumption). In such cases, an adult User may need to provide limited information relating to a Minor solely for facilitating the requested service.

Parental or Guardian Consent

The adult User providing information of a Minor represents and warrants being the parent or lawful guardian of the Minor;
Such User grants explicit, informed, and verifiable consent for the collection, processing, storage, and use of the Minor's information strictly for the disclosed and limited purpose.

Restriction on Use of Minor's Data

Not used to create a user account or profile for the Minor;
Not processed for marketing, advertising, profiling, or promotions;
Used only for the specific service expressly consented to by the parent or guardian.

Responsibility of the Adult User

The adult User furnishing information of a Minor assumes full responsibility for its accuracy and legitimacy, and undertakes to indemnify and hold harmless the Company against any claims or liabilities arising out of unauthorised provision of a Minor's data.

Right to Erasure

If the Company becomes aware that Minor's data has been collected without valid parental/guardian consent, it reserves the right to delete, anonymise, or expunge such information from its records immediately.

MISCELLANEOUS PROVISIONS

Third-Party Links and Services

The Platform may contain links, integrations, or references to third-party websites or services. The Company disclaims any responsibility for the authenticity, accuracy, content, or privacy practices of such services. The provision of information to such third parties is governed exclusively by their policies, and use of such services is at the User's sole risk.

Policy Amendments and Updates

The Company may update this Privacy Policy from time to time to reflect changes in law, technology, or business practices. The updated version shall be posted on the Platform with a "Last Updated" date. Continued use of the Platform after posting constitutes acceptance. Where legally required, fresh consent shall be obtained.

Governing Law and Jurisdiction

This Privacy Policy shall be governed by the laws of India. Any disputes shall fall under the exclusive jurisdiction of competent courts at Lucknow, Uttar Pradesh.

Severability

If any provision of this Policy is held unenforceable, the remaining provisions shall continue in full effect.

Waiver

Failure by the Company to enforce any provision of this Policy shall not be deemed a waiver of its rights.

GRIEVANCE REDRESSAL

In compliance with Rule 5(9) of the IT Rules, 2011, the Company has appointed the following Grievance Officer:

Name: Aishaan Sinha

Designation: Grievance Officer

Address: I 505, Silverline Apartment, Faizabad Road, Lucknow-226028

Email: aishaawntsinha@gmail.com

Phone: 9956238791 / 8081221164

Complaints shall be acknowledged within 24 hours and resolved within 15 days, in accordance with the Consumer Protection (E-Commerce) Rules, 2020.