Privacy policy

TiffinMarket processes account, order, and payment data to operate the service. Location lookups for address autocomplete may contact OpenStreetMap Nominatim from your browser.

Stripe processes card payments. Firebase may be used for phone verification. ImageKit hosts uploaded images. Outbound email is sent via our configured SMTP provider.

Processed Stripe webhook metadata is retained for up to 90 days for reconciliation, then expired automatically. Failed webhook records are also expired after 90 days.

Customer and staff portals store authentication tokens in browser local storage (not cookies). Cart, favourites, and saved location preferences may also use local storage. Marketing cookies are not used in this MVP.

For data access, correction, or deletion requests, contact dikant9@gmail.com.

Back to home