Privacy Policy

This policy explains what personal information Brewly collects through this website, why we collect it, who we share it with and what choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 and the rules made under it, and the Information Technology Act, 2000.

1. Who we are

Brewly is operated by Dhaval Pandya, an individual based in Ahmedabad, Gujarat, India ("Brewly", "we", "us"). For this policy we are the data fiduciary for the information described below. You can reach us at dhaval@brewly.co.in.

2. What we collect

When you apply to the Founding Cafe programme

• About your cafe: name, city and neighbourhood, stage, number of outlets, a web or social link, and a description in your own words.
• About you: name, role, email address, phone or WhatsApp number, your background and experience, and anything you choose to write about your experience with point-of-sale systems.
• What you tell us about how you run things and why you want to take part, how often you could meet, and how you heard about us.
• Your consent choices: use of anonymised operating data, contact about your application, and whether you are open to being a reference.

Technical information

• When you submit the form we keep a one-way, salted hash of your IP address and the first part of your browser's user-agent text. We use them only to detect abuse and spam. We do not store your raw IP address with your application.
• Our hosting provider and our bot-check service process standard connection data (such as IP address and request details) to deliver the site and keep it secure.

We do not ask for payment details, government identifiers or passwords on this site.

3. Why we use it

• To read and decide your application, and to contact you about it, including by email, phone or WhatsApp. This relies on your consent, which you give when you submit the form.
• To run the Founding Cafe programme if you are accepted.
• To keep the site secure and prevent spam and abuse.
• To improve our programme and our selection process, using information in aggregate.

We do not sell your personal information. We do not use it for advertising, and we do not use it to train third-party models.

4. Who we share it with

We share information only with service providers who process it for us, under terms that restrict their use of it:

• Email delivery: Resend, to send you messages about your application.
• Website delivery, bot protection and security: Cloudflare.
• Database and hosting: Amazon Web Services, in Mumbai, India.
• Email delivery (the acknowledgement we send after you apply): Resend.

We may disclose information if the law requires it or to protect our legal rights. Some providers may process data outside India. We take reasonable steps to ensure it is protected.

5. How long we keep it

• Applications that are not accepted: 12 months after the decision, unless you ask us to keep your details for a later wave.
• Applications that are accepted: for as long as the programme runs and 24 months after it ends.
• Technical abuse data: 90 days.

After that we delete the information or make it anonymous. You can ask us to delete it sooner.

6. Cookies and similar technologies

This site does not use advertising or tracking cookies, and it serves its fonts and images from its own domain rather than from third parties. Our bot-check service may set a short-lived technical cookie to confirm that you are a person. This website does not use analytics or advertising cookies.

7. Your rights

Under Indian law you may:

• ask for a summary of the personal information we hold about you and how we use it;
• ask us to correct or complete it;
• ask us to erase it;
• withdraw your consent at any time, which will not affect what we did before you withdrew it; and
• nominate someone to exercise these rights for you if you die or become unable to.

Write to dhaval@brewly.co.in. We will respond within 30 days. If you are not satisfied, you may contact our grievance officer, Dhaval Pandya, at dhaval@brewly.co.in, and, after that, the Data Protection Board of India.

8. Security

We protect information with access controls, encrypted connections and limited internal access. No system is perfectly secure. If a breach affects your information, we will tell you and the authorities as the law requires.

9. Children

This site is for business owners and is not directed at anyone under 18. We do not knowingly collect information from children.

10. Changes to this policy

We will post any changes here and update the date above. If a change is significant we will tell applicants by email.