Privacy Notice

Salt & Pepper ("S&P", "we", "us") respects your privacy. This notice explains what personal data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have under India's Digital Personal Data Protection Act 2023 (DPDP Act).

1. Who collects your data

SaltPepper AI Private Limited (CIN U63122AS2026PTC030532), registered office House No. 12, Chandraprabha Barua Path, Silpukhuri, Guwahati, Kamrup (Metro), Assam – 781003. We are the Data Fiduciary for the data described below.

2. What we collect

3. Why we are allowed to collect it

• Your consent for everything captured at sign-up (the rows above).
• Contract performance for order data — we cannot fulfil a booking without it.
• Legitimate interest for fraud prevention, security logs, and aggregate analytics.

4. How long we keep it

• Orders, contracts, payments: 7 years from the event date (Income Tax Act requirement).
• Profile data: until you delete your account. After deletion, a 30-day grace period for recovery, then your account is deactivated and made inaccessible. A permanent purge/anonymisation schedule is being finalised; until then, deactivated data is retained in deactivated state, not immediately erased.
• Notification token: until you sign out or uninstall the app, whichever is sooner.
• Marketing preferences: until you withdraw consent.

5. Who we share it with

We do not sell, rent, or trade your data. We share specific data with named processors only so we can deliver the service you booked:

6. Your rights under the DPDP Act

You can, at any time:

• Access the data we hold about you — in the app: Profile › Settings › My Data.
• Correct inaccurate data — in the app: Profile › Edit.
• Withdraw consent for marketing communications — in the app: Profile › Notification preferences.
• Delete your account and your data — in the app: Profile › Delete account. Active orders block deletion until they are completed or cancelled. After deletion, a 30-day grace period applies; you can sign in during this window to recover. After the grace period your account is deactivated and made inaccessible (see "How long we keep it" above).
• Nominate another person to exercise these rights on your behalf if you pass away or become incapacitated — write to the Grievance Officer below.
• Grievance redressal — write to the Grievance Officer below, or complain to the Data Protection Board of India. We aim to acknowledge your query within 7 days and resolve it within 30 days.

7. Children

The S&P app is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, write to the Grievance Officer and we will delete it.

8. When we change this notice

If we materially change this notice, we will:

• Bump the version (currently v1.0)
• Surface the change in the app the next time you sign in
• Ask for fresh consent before processing under the new terms

9. Grievance Officer

Name: [name pending appointment]
Email: customer@saltpepper.ai
Phone: [phone pending]
Address: SaltPepper AI Private Limited, House No. 12, Chandraprabha Barua Path, Silpukhuri, Guwahati, Kamrup (Metro), Assam – 781003
We aim to acknowledge your query within 7 days and resolve it within 30 days, as required by the DPDP Act.