Privacy Policy

JustSalad is a health food subscription service operated by Infynix Labs, an IT partnership firm registered in India. Infynix Labs is responsible for all aspects of the JustSalad platform including technology, data processing, customer support, delivery coordination, and refunds.

• Business Name: Infynix Labs
• Product: JustSalad
• Website: justsalad.in
• Email: hello@justsalad.in
• Support (Infynix Labs): support@infynixlabs.com
• Phone / WhatsApp: +91 9998299651

2.1 Information You Provide Directly

• Account Information: Full name, phone number, email address, date of birth, gender
• Delivery Information: Full delivery address, area, city, state, pincode, landmark, GPS coordinates
• Dietary Preferences: Dietary type (vegan, vegetarian, etc.), allergies, spice preferences, health goals, disliked ingredients
• Payment Information: We do not store full card/UPI details. Payments are processed securely by Razorpay. We retain Razorpay order IDs, payment IDs, and transaction status for record-keeping.
• Communication: Messages you send via our contact form, email, or WhatsApp

2.2 Information Collected Automatically

• Device information (browser type, OS, screen resolution)
• IP address and approximate location
• Pages visited, time spent, referral URLs
• Session cookies and authentication tokens
• Push notification tokens (if you opt in)

2.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email, and profile picture as permitted by your Google account settings
• Razorpay: Payment status, method (card/UPI/net banking/wallet), and transaction metadata

We use your personal information for the following purposes:

• Service Delivery: To process orders, manage subscriptions, schedule and deliver meals to your address
• Account Management: To create and maintain your account, authenticate you, and personalise your experience
• Dietary Personalisation: To customise meal recommendations and AI-generated meal suggestions based on your preferences
• Payments & Billing: To process subscription payments, apply coupons, issue refunds, and maintain financial records
• Communications: To send order confirmations, delivery notifications, OTP messages, promotional offers (with your consent), and service updates via SMS, email, or push notification
• Customer Support: To respond to your queries, complaints, and feedback
• Legal Compliance: To comply with applicable Indian laws including the Information Technology Act 2000, GST regulations, and other statutory obligations
• Analytics & Improvement: To understand usage patterns, fix bugs, and improve service quality
• Fraud Prevention: To detect and prevent unauthorised access, fraudulent transactions, and abuse

We use the following cookies and local storage mechanisms:

• Authentication cookies: Secure, HTTP-only session tokens managed by Supabase to keep you logged in
• Preference cookies: To remember your UI preferences (e.g., theme)
• Analytics: We may use privacy-respecting analytics tools to understand how our service is used. These do not share identifiable data with advertising networks.

You can disable cookies in your browser settings, but this may affect service functionality (e.g., you may need to log in every visit).

We do not sell, rent, or trade your personal information to third parties. We only share your data as follows:

• Razorpay:Payment processing. Subject to Razorpay's own privacy policy.
• Supabase: Our backend database and authentication provider. Data is stored on secure servers.
• Delivery Partners / Personnel: Your delivery address and contact number are shared with delivery staff solely for the purpose of delivering your order.
• SMS Gateway (bulksmsplans.com): Your phone number is used to send OTP verification messages.
• Google (OAuth):If you use Google Sign-In, your login data flows through Google's OAuth infrastructure.
• Law Enforcement / Legal Obligations: We may disclose information if required by a court order, government authority, or to protect the rights and safety of our users.

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account and profile data: Retained until you request deletion
• Order and payment records: Retained for 7 years for financial and legal compliance
• Delivery logs: Retained for 2 years
• Contact/support messages: Retained for 3 years
• Inactive accounts: We may delete accounts that have been inactive for more than 3 years after prior notice

We implement industry-standard security measures to protect your personal information:

• All data is transmitted over HTTPS/TLS encryption
• Passwords are never stored in plain text; we use bcrypt hashing
• Database access is restricted via Row Level Security (RLS) policies
• Admin access requires separate secure authentication
• Payment card details are never stored on our servers — handled exclusively by Razorpay's PCI-DSS-compliant infrastructure
• Regular security reviews and access audits are conducted

Despite these measures, no internet transmission is 100% secure. In the event of a data breach that affects your rights, we will notify you promptly as required by law.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and personal data (subject to legal retention requirements)
• Portability: Request your data in a structured, machine-readable format
• Withdraw Consent: Withdraw consent for marketing communications at any time
• Opt Out: Unsubscribe from promotional SMS/emails via the unsubscribe link or by contacting us

To exercise any of these rights, contact us at hello@justsalad.in or support@infynixlabs.com. We will respond within 30 days.

JustSalad is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

Our website may contain links to third-party websites (e.g., social media, payment gateways). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you via email or a prominent notice on the website. The "Last updated" date at the top of this page indicates the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Any disputes shall be subject to the exclusive jurisdiction of courts in Ahmedabad, Gujarat, India.

For any privacy-related questions, data requests, or concerns:

• Email: hello@justsalad.in
• Infynix Labs Support: support@infynixlabs.com
• Phone / WhatsApp: +91 9998299651
• Address: Science City, Ahmedabad, Gujarat, India