Privacy Policy

Last updated: 11 July 2026

[LEGAL ENTITY NAME] ("Sauceit", "we") is committed to handling personal data responsibly under India's Digital Personal Data Protection Act, 2023 (DPDP) and other applicable law. This policy explains what we collect and why.

1. What we process

Account data — name, work email, password hash (or Google sign-in identifier), organisation and kitchen details you provide.
Camera video — frames from CCTV cameras that our customer (your employer or facility operator) connects. Frames are analysed to detect people, PPE items and meal-related events.
Derived analytics — detections, counts, compliance scores and incident records produced from that video.
Technical data — logs necessary to run and secure the service.

No biometric enrollment. Meal billing and compliance monitoring work without fingerprint or face registration. We do not build face databases or identify individuals by name unless a customer explicitly enables a future opt-in feature with recorded consent from the individuals concerned.

2. Why we process it

Solely to provide the service our customer signed up for: food-safety compliance monitoring, meal counting and billing reports. We do not sell personal data. We do not use identifiable footage for advertising or unrelated purposes. Aggregated, anonymised statistics may be used to improve detection quality.

3. Retention

Video frames in cloud storage: 7 days by default (configurable per customer), then deleted automatically.
Incident evidence images: retained while the customer account is active, for audit trails.
Counting/billing numbers (no imagery): at least 12 months, for billing reconciliation.
Account data: for the life of the account plus statutory record-keeping periods.

4. Where it lives & how it's protected

Data is hosted in India (Mumbai region). Transport is encrypted (TLS); access requires authenticated, role-scoped accounts; camera credentials are stored encrypted; organisations are strictly isolated from each other.

5. Sharing

Only with infrastructure processors needed to run the service (cloud hosting, email/SMS delivery, payment processing) under contract, and with authorities where the law requires it.

6. Your rights

Under the DPDP Act you may request access to, correction of, or erasure of your personal data, and may raise grievances. Workers whose images appear in a customer's footage should contact their facility operator (the data fiduciary for their premises) or us directly.

7. Grievance officer

[GRIEVANCE OFFICER NAME] — info@sauceit.ai, [PHONE]. We acknowledge complaints within 3–5 business days and resolve within statutory timelines.

8. Changes

We will notify account owners of material changes to this policy by email and keep prior versions available on request.