Contact Support
Document: Privacy Policy & Data Security
Last Updated: October 11, 2026
Target: All Marketplace Users

Privacy Policy & Data Security

Welcome to Pluto. We are profoundly committed to safeguarding your personal data, protecting your digital privacy, and maintaining absolute transparency regarding our administrative records. This Privacy Policy details how we collect, process, compile, and protect the information that you share when using our mobile application, local databases, transaction routing channels, and allied web services.

1. Introduction & Corporate Commitment

Pluto functions as a collaborative digital catalog, campus food ordering, and wallet ecosystem. By utilizing our App and accessing our subscription tiers, you unequivocally consent to the procedures described herein. We process your data in strict compliance with applicable global regulations, including the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, GDPR, and CCPA standards.

2. Comprehensive Breakdown of Data We Collect

We collect multiple categories of information to verify accounts, process orders, list catalog details, and secure wallet balances. The categories of personal data collected include:

  • Account Identifiers: Full legal name, verified email address, phone number, and profile imagery.
  • Business & Partner Catalog Data: For independent businesses (Ateliers / Canteens), we compile business registration names, campus locations, operational addresses, service classifications, FSSAI regulatory license numbers, taxation codes, catalog listings, inventory specifications, and operational schedules.
  • Financial & Ledger Transactions: Records of all wallet transfers, checkout payments, digital credits, deposit receipts, withdrawal bank/UPI details, transaction references (including Bank UTR references), and Cashfree payment gateway order IDs.
  • Location & Delivery Telemetry: GPS coordinates and detailed delivery locations (collected with explicit user permission) used solely to calculate delivery fees and verify geofenced store availability (such as at IIT Guwahati).
  • Mobile Device Telemetry: IP addresses, network carriers, hardware model specifications, operating system versions, platform crash dumps, and application state variables.

3. Systemic Methods of Data Collection

Pluto collects user and partner data through three primary mechanisms:

  • Direct Input: Information manually entered during account creation, catalog updates, delivery address selection, or withdrawal requests.
  • Automated Platform Logging: As you navigate the app, our backend servers automatically log telemetry variables, API latencies, and device indicators to prevent fraud and optimize system performance.
  • Third-Party Integrations: We receive transaction states and receipt validation responses directly from certified payment gateway partners (Cashfree Payments India Pvt. Ltd.) and Apple StoreKit to verify orders and subscription tiers.

We do not sell or lease your personal information. We process data strictly based on the following legal foundations:

  • Contractual Performance: Necessary to verify vendor credentials, maintain real-time wallet balances, route customer orders, and validate subscription packages.
  • Legitimate Business Interest: To detect fraudulent actions, monitor for objectionable content or illegal product listings, evaluate application crashes, and enforce our platform standards.
  • Legal Compliance: For taxation recording, keeping FSSAI license compliance logs, and cooperating with statutory law enforcement requests under the Information Technology Act, 2000.
  • Explicit Consent: For publishing geographical coordinates, accessing device photos for product catalog uploads, and tracking user-level analytics.

5. Public Listing Media vs. Confidential KYC & Document Security

Pluto enforces strict logical isolation between public merchant media and sensitive private compliance records:

  • Public Catalog Media: Storefront images, product photos, food gallery snapshots, and promotional listings uploaded by Partners are classified as Public Catalog Media. Partners grant Pluto a royalty-free license to index and display these photos across our customer discovery apps.
  • Confidential KYC Documents & Identity Proofs: Sensitive records uploaded during partner onboarding — including PAN cards, GSTIN certificates, FSSAI licenses, government ID proofs, bank account details, and private customer delivery addresses — are classified as Strictly Confidential. These documents are encrypted with AES-256 at rest and in transit via TLS 1.3, stored in isolated access-controlled cloud repositories, strictly hidden from public APIs and search engines, and accessed exclusively by authorized compliance personnel for identity verification, regulatory tax reporting, and payout processing.
  • Intermediary Platform Protection: In accordance with Section 79 of the Information Technology Act, 2000, Pluto acts solely as an intermediary technology aggregator. Product listings, food safety standards, allergy warnings, and service quality are the direct legal responsibility of each independent merchant.

6. Digital Payments via Cashfree, Order Escrow, & Wallet Refunds

Pluto partners with Cashfree Payments India Pvt. Ltd. (PCI-DSS Level 1 certified) for processing digital checkouts via UPI, Cards, and Net Banking:

  • Zero Sensitive Credential Storage: Pluto never collects or stores credit/debit card numbers, CVVs, or Net Banking credentials. All payment processing is conducted via secure, RBI-compliant tokenization flows within Cashfree.
  • Order Completion Escrow: Customer order payments are held securely in platform escrow until the merchant marks the order as Completed. Only upon fulfillment are earnings released to the partner's wallet.
  • Instant Auto-Refunds: If an order is cancelled before preparation or completion, customer funds are automatically refunded 100% to the customer's Pluto Wallet balance.
  • Bank Payouts & UTR Records: Merchant withdrawal requests are processed to registered UPI IDs or bank accounts, and Bank UTR (Unique Transaction Reference) codes are recorded in the ledger for full auditability.

7. StoreKit Receipt Validation & Subscription Data

All auto-renewable subscriptions inside the Pluto iOS app (Silver, Gold, Platinum Tiers) are governed by Apple StoreKit. When you purchase or restore a tier, the transaction is processed directly on Apple's secure infrastructure. StoreKit transmits a secure receipt token to our servers. Our backend acts as a verification proxy, sending this token to Apple's validation servers to determine subscription state, renewal dates, and billing periods. Pluto never accesses or stores credit card numbers, billing addresses, or iTunes credentials. The validated state is written to our backend database and synced to the local database on your device.

8. Granular Data Retention Schedules

We retain personal and business data only as long as necessary for operational, legal, and compliance reasons:

  • Active Accounts: All account data, catalogs, and wallet records are stored continuously for the duration of the account's life.
  • Terminated Accounts: Upon account deletion requests, personal identifiers are permanently scrubbed or anonymized within 30 days, except where law requires otherwise.
  • Financial & Wallet Ledgers: Under financial regulations and anti-money laundering guidelines, all ledger records, payout references, and subscription transaction details are retained for a minimum of 7 years from the date of the transaction.
  • System Performance Logs: General crash logs and telemetry data are automatically deleted or rotated every 90 days.

9. Authorized Third-Party Disclosures

We share data only with trusted partners who operate under strict non-disclosure terms:

  • Payment Infrastructure: Cashfree Payments (PCI-DSS Level 1 certified) for checkouts and disbursements, and Apple App Store/StoreKit for iOS subscriptions.
  • Hosting & Cloud Processing: Google Cloud Platform and AWS encrypted server infrastructure.
  • Push Notifications: Firebase Cloud Messaging (FCM) for instant order lifecycle alerts and payout notices.
  • Legal Authorities: We disclose information if required under court order or statutory command to comply with anti-money laundering or safety standards.

8. Statutory Privacy Rights (GDPR / CCPA / DPDP 2023)

Under applicable global and local laws, you possess the following rights regarding your data:

  • Right to Access: You can request details of the personal data we hold about you at any time.
  • Right to Rectification: You can update incorrect or incomplete profiles directly in your settings.
  • Right to Erasure ('Right to be Forgotten'): You can request complete deletion of your account and personal history, subject to statutory retention limits.
  • Right to Restrict Processing: You can object to specific processing operations, such as marketing communication or device telemetry tracking.
  • Right to Data Portability: You can request a machine-readable copy of your personal details and catalog listings.
  • Right to Nominate (DPDP Act, 2023): You have the right to nominate any individual to exercise your privacy rights in the event of death or incapacity.

9. Cookies, Local Caching, & On-Device Storage

Pluto uses local data caching mechanisms (Hive boxes and SQLite) on your mobile device. These local repositories store session tokens, active partner catalog configurations, and localized wallet logs. Local cache minimizes network overhead and allows offline functionality. These files are stored within the sandbox of the Pluto app and cannot be read by other applications. You can clear local data by logging out or selecting 'Clear App Cache' in the Profile settings.

10. Child Privacy & COPPA Safeguards

Pluto does not knowingly collect, compile, or process personal data from children under the age of 13. If we discover that an account has been created by a minor under 13, the account, catalog listings, and wallet details will be deleted permanently from our production databases within 24 hours. Parents or guardians who believe their child has shared personal information can contact us immediately at powerofthreeideations@gmail.com.

11. Grievance Officer & Official Contact Details

If you have queries, grievances, or seek to exercise your statutory data rights, you may contact our designated Grievance Officer under India's Information Technology rules. The Officer will address your concerns within 15 days of receiving the grievance email:

  • Email: powerofthreeideations@gmail.com
  • Subject: Data Privacy Inquiry / Grievance Redressal
  • Address: Legal & Privacy Directorate, Powerofthree Ideations Private Limited, Pune, Maharashtra, India.