Privacy Policy

This policy applies to two groups:

• Business users — the cafe, food brand, or boutique owners and staff who sign up for and use YBES.
• End customers — the customers of those businesses, whose contact details and transaction data a business user may upload to or collect through YBES.

If you are an end customer and want your data removed, please contact the business you interacted with directly, as they control that data. See Section 4.

Information you give us when you sign up:

• Name, mobile number, email address
• Business name and category
• Business address and outlet details
• GSTIN (if provided for invoicing)

Information we collect as you use YBES:

• Campaigns you create and send
• Loyalty programs and rewards you configure
• Usage data (features used, login times, device and browser type)
• Support requests and communications with us

Payment information:

Payments are processed by our payment partner, Razorpay. We do not store your full card or bank details on our servers. We retain only transaction records needed for billing and GST-compliant invoicing.

We use the information we collect to:

• Provide, operate, and maintain the YBES platform
• Process payments and issue GST-compliant invoices
• Send you service-related communications (account, billing, security)
• Provide customer support
• Improve our product and develop new features
• Detect, prevent, and address fraud or technical issues
• Comply with legal obligations under Indian law

We do not sell your personal information to third parties.

When you use YBES, you may upload or collect data about your own customers — names, mobile numbers, email addresses, birthdays, and transaction history.

For this data:

• You are the data controller. You decide what to collect and how to use it.
• YBES is the data processor. We store and process this data on your behalf, only to provide the service.
• You are responsible for obtaining the necessary consent from your customers before uploading their data or sending them messages.
• You must comply with applicable laws, including the Digital Personal Data Protection Act, 2023, when collecting and using customer data.

If an end customer asks us directly to delete their data, we will direct them to you, since you control that data.

We share information only in these limited cases:

• Service providers — companies that help us run YBES (cloud hosting, payment processing, messaging delivery). They access data only to perform their function and are bound by confidentiality.
• Legal requirements — when required by law, court order, or government request.
• Business transfers — if YBES is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

YBES sends messages on your behalf through WhatsApp, SMS, and email.

• WhatsApp messages are delivered via the WhatsApp Business API and are subject to WhatsApp's own policies.
• As a business user, you confirm that you have obtained valid consent from your customers before sending them messages through YBES.
• We are not responsible for messages you send without proper consent. You agree to indemnify Ruminuz Digital Pvt Ltd against claims arising from messages you send without the required consent.

Your data is stored on secure cloud infrastructure.

We use reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain your information for as long as your account is active and as needed to provide the service.

If you cancel your account, your data is retained while your account remains in a downgraded (Free) state. If you request full deletion, we will delete your personal data within a reasonable period, except where we are required to retain certain records (such as billing and tax records) under Indian law.

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Withdraw consent where processing is based on consent
• Raise a grievance with us

To exercise any of these rights, contact us at hello@ybes.in.

YBES uses cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is used. You can control cookies through your browser settings. Disabling some cookies may affect how YBES works.

YBES integrates with third-party services, including POS systems (Petpooja, Dynex, Vimtech VMenu), payment processing (Razorpay), and messaging channels (WhatsApp Business API). When you connect these services, their own privacy policies apply to the data they handle.

YBES is a business tool and is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you. Continued use of YBES after changes means you accept the updated policy.

For any questions, requests, or grievances about this Privacy Policy or your data: