Your data, your rights
We are committed to protecting your personal data and being transparent about how we use it. This policy explains everything clearly.
Zosata is a WhatsApp-native food ordering platform for restaurants, operated by Dotflo Technologies. We help restaurants take orders directly via WhatsApp — without aggregator commissions — through automated chatbot flows, menu management, and direct payment settlement.
We are committed to user privacy, data transparency, and responsible data management. Your privacy is one of our top priorities.
A. Information You Provide Directly (Restaurant Owners / Business Users)
- Account Registration: Name, email address, phone number, password, business name, and language preference.
- Restaurant Profile: Restaurant name, cuisine type, menu items, pricing, photos, and operating hours.
- Billing & Payment Details: Billing name, address, payment method details (handled securely by third-party processors), and transaction history.
- Menu Content: Food item descriptions, categories, prices, and images you upload to the platform.
- WhatsApp Business Number: The WhatsApp Business number you connect to the Zosata platform.
B. WhatsApp Conversation & Order Data (from End-Customer Interactions)
- Customer Phone Number: The WhatsApp phone number of the end-customer who messages the restaurant.
- Delivery Address: Any address the customer shares during the ordering process (e.g., "42 MG Road, Sector 5, Gurgaon"). This is stored to fulfil the order and for the restaurant's records.
- Order Details: Items ordered, quantities, sizes, customisations, and order value.
- Conversation Messages: The chat transcript between the customer and the Zosata-powered chatbot for that order session.
- Order Timestamps: Time and date of order placement and confirmation.
- Payment Status: Whether payment was completed (we do not store card numbers or raw payment data — this is handled by PCI-DSS compliant payment processors).
C. Information Collected Automatically
- Usage Data: Pages visited in the dashboard, features accessed, and time spent.
- Device & Technical Data: IP address, browser type, operating system, and device identifiers.
- Log Files: System logs from API usage including timestamped metadata.
| Data Type | Purpose |
|---|---|
| Restaurant account data | Account management, authentication, billing, and support |
| WhatsApp conversation data | Powering the chatbot order flow; storing order records for the restaurant |
| Customer delivery addresses | Order fulfilment — displayed to the restaurant for delivery dispatch |
| Customer phone numbers | Order identity; allowing restaurants to contact customers about their order |
| Order details & history | Restaurant order dashboard; analytics for the restaurant owner |
| Usage & device data | Platform performance, bug fixing, and security monitoring |
- We do not sell your data or your customers' data to any third party.
- We do not use WhatsApp conversation data or customer addresses to train generalised AI or machine learning models.
- We do not share one restaurant's customer data with any other restaurant or business.
- We do not store raw credit card or payment card numbers.
We share data only when necessary to provide the service. We do not sell personal information.
- Payment Processors: Stripe, Razorpay, or similar PCI-DSS compliant processors — for handling payments securely.
- WhatsApp / Meta: Message delivery is facilitated via the WhatsApp Business API. Meta's own privacy policies govern their platform.
- Cloud Infrastructure: Our hosting and storage providers operate under strict data processing agreements.
- Law Enforcement: Only when legally required by a valid court order or applicable law.
- Dotflo Technologies (Parent Company): Zosata is operated by Dotflo Technologies, which has access to platform data as the operating entity.
We retain your data for as long as your account is active, or as required by applicable law. Specifically:
- WhatsApp conversation & order data: Retained for the duration of the restaurant's active subscription, plus up to 90 days after account closure, unless a deletion request is made.
- Customer delivery addresses: Stored alongside the associated order record. Restaurants can delete order history from their dashboard.
- Billing records: Retained for up to 7 years as required by financial regulations.
- Account data: Deleted within 30 days of account deletion request (backup deletion may take up to 30 additional days).
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your data (subject to legal retention requirements).
- Data Portability: Request your data in a machine-readable format.
- Objection: Object to certain types of processing.
- Withdraw Consent: Withdraw consent for any processing based on consent.
To exercise any of these rights, contact us at contact@zosata.com or via WhatsApp on +91 99272 70503.
We implement industry-standard technical and organisational measures to protect your data:
- Encryption in transit (TLS 1.3) and at rest (AES-256) for all sensitive data, including WhatsApp conversation records and delivery addresses.
- Strict access controls — only authorised personnel with a legitimate business need can access stored conversation data.
- Regular security audits and vulnerability assessments.
- Payment data never stored on our servers — handled by PCI-DSS compliant processors only.
- Incident detection and response protocols, including breach notification where required by law.
Zosata uses cookies and similar tracking technologies on our website and dashboard to improve user experience, analyse traffic, and enable core functionality. By using our site, you consent to the use of cookies unless you disable them via your browser settings.
We do not use cookies to track end-customers of restaurants — cookie tracking applies only to users of the Zosata dashboard and website.
Zosata integrates with WhatsApp (Meta), payment gateways (Razorpay, Stripe), and cloud infrastructure providers. These services are governed by their own privacy policies. We recommend reviewing them directly. Zosata is not responsible for the privacy practices of third-party platforms.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification. Your continued use of Zosata after changes constitutes your acceptance of the updated policy.
For privacy-related concerns, data deletion requests, or to exercise your rights:
Our terms, simply stated
These terms govern your use of the Zosata platform. By using Zosata, you agree to these terms. Please read them carefully.
Welcome to Zosata, a WhatsApp-native food ordering platform for restaurants, operated by Dotflo Technologies. Please read these Terms of Service ("Terms") carefully before using our platform at zosata.com and all associated services.
By accessing or using Zosata, you agree to be bound by these Terms. If you do not agree, you may not use the service.
Zosata is a SaaS platform that enables restaurants and food businesses to receive orders directly through WhatsApp — without paying commission to food aggregators. We provide chatbot automation, menu management, and order management tools.
Zosata is owned and operated by Dotflo Technologies. All contractual relationships are with Dotflo Technologies.
To use Zosata, you must create an account. By registering, you agree to:
- Provide accurate, current, and complete information about yourself and your business.
- Keep your login credentials confidential and not share them with unauthorised parties.
- Be responsible for all activity that occurs under your account.
- Be at least 18 years of age or of legal age in your jurisdiction.
- Notify us immediately at contact@zosata.com if you suspect unauthorised access to your account.
We reserve the right to suspend or terminate accounts at our discretion, including for violations of these Terms or suspected fraudulent activity.
Zosata offers subscription plans (details at zosata.com/pricing). By subscribing, you agree to:
- Pay all applicable subscription fees as per the current pricing page.
- Authorise us to charge your provided payment method on a recurring basis.
- Plans auto-renew unless cancelled before the renewal date.
- Refunds are granted only under specific conditions as stated in our Refund Policy.
As a restaurant owner using Zosata, you are responsible for:
- Informing your customers, where required by applicable law, that their conversation data (including delivery addresses and order details) is stored and processed by Zosata / Dotflo Technologies.
- Ensuring you have a lawful basis to collect and process your customers' personal data through the Zosata platform.
- Using customer data (including phone numbers and addresses obtained via Zosata) only for legitimate order fulfilment and customer communication purposes related to their orders.
- Not using Zosata's WhatsApp tools to send unsolicited spam, promotional broadcasts, or messages that violate WhatsApp's Business Messaging Policy.
- Complying with WhatsApp's Terms of Service and Business Policy at all times when using your connected WhatsApp Business number.
You agree not to use Zosata to:
- Violate any local, national, or international laws or regulations.
- Abuse messaging features to spam, mislead, or harass customers.
- Upload malware, interfere with platform stability, or attempt to scrape platform data.
- Impersonate any person, restaurant, or organisation.
- Promote hate speech, violence, or discrimination.
- Resell or sublicense Zosata's services without our written consent.
We reserve the right to suspend or permanently ban users for violations without prior notice.
Zosata is designed for legitimate food and beverage businesses. The following are strictly prohibited:
- Illegal or unlicensed food businesses that do not comply with applicable food safety regulations.
- Distribution of illegal substances or controlled substances.
- Sale of counterfeit or stolen goods.
- Money laundering or fraudulent financial activity.
- Any other activity that is illegal under applicable local, national, or international law.
You retain ownership of all content you upload to Zosata — including your menu, images, and business information. By using our platform, you grant Zosata (Dotflo Technologies) a non-exclusive, worldwide licence to store, display, and process such content solely as necessary to provide the service to you.
You must ensure your content does not violate third-party rights, applicable laws, or WhatsApp/Meta platform policies.
All intellectual property in the Zosata platform — including software, chatbot logic, UI, logos, and brand assets — is owned by Dotflo Technologies and protected by applicable intellectual property laws.
You may not copy, reverse-engineer, decompile, or create derivative works based on any part of the Zosata platform without our prior written consent. You may not use the Zosata or Dotflo Technologies name, logos, or branding without permission.
Zosata integrates with WhatsApp (Meta), payment gateways, and other third-party services. You agree to abide by the terms and policies of these platforms. Zosata is not responsible for disruptions, policy changes, or actions taken by third-party services, including WhatsApp/Meta restricting or suspending your WhatsApp Business number.
To the maximum extent permitted by applicable law, Dotflo Technologies / Zosata is not liable for:
- Lost profits, revenue, or data arising from your use of the platform.
- Service interruptions, downtime, or platform failures.
- Actions, restrictions, or policy changes made by WhatsApp/Meta or other third-party platforms.
- Loss or breach of customer data resulting from your own misuse or failure to secure your account.
Our total liability to you in any circumstance is limited to the total subscription fees you paid to us in the 3 months prior to the incident giving rise to the claim.
You agree to indemnify, defend, and hold harmless Dotflo Technologies, its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including legal fees) arising from:
- Your use or misuse of the Zosata platform.
- Your violation of these Terms or applicable laws.
- Any content or data you submit through your account, including WhatsApp messages sent to customers.
- Your failure to comply with WhatsApp's Business Messaging Policy.
- Any dispute between you and your customers arising from orders placed via Zosata.
We may suspend or terminate your access to Zosata at our sole discretion, with or without prior notice, for violations of these Terms or for any other legitimate business reason.
Upon termination: your licence to use the service ends immediately; you may request deletion of your data as per our Privacy Policy; you may not create a new account if your previous account was terminated for violations.
You may cancel your subscription at any time through your account dashboard or by contacting us.
These Terms are governed by the laws of India. Any dispute arising from your use of Zosata shall first be attempted to be resolved informally by contacting our support team. If unresolved, disputes shall be subject to the exclusive jurisdiction of the courts of India.
You waive the right to participate in class action lawsuits against Dotflo Technologies / Zosata.
We may update these Terms from time to time. Material changes will be communicated via email or an in-app notification at least 7 days before taking effect. Your continued use of Zosata after changes constitutes your acceptance of the updated Terms.
For legal enquiries or questions about these Terms: