Last Updated: March 3, 2026
Twobits Technologies Pvt Ltd ("we," "our," or "us") operates the DeltaOrders mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.
We are committed to protecting your privacy and ensuring the security of your personal information. By using DeltaOrders, you agree to the collection and use of information in accordance with this policy.
We collect information that you voluntarily provide to us when you:
When you use our Service, we automatically collect certain information:
We may receive information from third-party services you connect to DeltaOrders, such as:
When you use the DeltaOrders mobile app, we may request access to certain device features. You can grant or revoke these permissions at any time in your device settings. We only access these features when you choose to use related functionality in the app.
We use the collected information for the following purposes:
When your customers place orders or make payments through your DeltaOrders storefront, we process their personal and payment-related information on your behalf as a service provider. You are responsible for your own relationship and legal obligations with your customers, including providing any privacy notices that apply to them, while we facilitate the underlying order management and payment processing via our third-party providers (such as Razorpay).
DeltaOrders uses Firebase Cloud Messaging to send push notifications. These notifications may include:
You can disable push notifications at any time through your device settings or within the app. Note that disabling notifications may affect your ability to receive timely order updates.
We implement industry-standard security measures to protect your personal information:
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
If we become aware of a data breach that is likely to result in a high risk to your rights or personal information, we will notify you and, where required, the appropriate authorities in accordance with applicable law.
We retain your personal information for as long as necessary to:
When you request deletion of your account from within the app, your account will first be scheduled for deletion and placed into a grace period (currently 30 days) during which your data is retained in a deactivated state so you can contact us to cancel the deletion if needed. After the grace period ends, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or regulatory purposes.
Notwithstanding account deletion, we may retain certain transaction records, invoices, tax-related information, and payment data for a period of up to 8 years (or a longer period if required by applicable law) to comply with statutory tax, accounting, anti-money laundering, and other legal obligations in India.
We do not sell your personal information. We may share your information in the following circumstances:
We share information with third-party service providers who help us operate the Service:
We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to:
If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.
You have the following rights regarding your personal information:
To exercise these rights, please contact us at privacy@twobits.in or through the app settings.
For users in India, we process personal data in line with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and rules made thereunder. You may exercise your rights as a data principal, including the right to access, correction, and grievance redressal, by contacting our Grievance Officer & Data Protection Officer as described in Section 17.
DeltaOrders is not intended for use by children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we discover that we have collected information from a child under 13, we will promptly delete it.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.
We use Google Firebase services, which may store data in Google-operated data centers in India and in other countries (such as the United States or member states of the European Union), depending on how our infrastructure is configured. By using the Service, you consent to the transfer, storage, and processing of your information in these locations, subject to appropriate safeguards as required by applicable law.
DeltaOrders integrates with third-party services that have their own privacy policies:
We encourage you to review the privacy policies of these third-party services. We are not responsible for their privacy practices.
We use cookies and similar tracking technologies to track activity on our Service and store certain information. Types of cookies we use:
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
We may update our Privacy Policy from time to time. We will notify you of any changes by:
You are advised to review this Privacy Policy periodically. Changes are effective when posted on this page. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
If you are a California resident, you have specific rights regarding your personal information:
To exercise these rights, please contact us using the information below.
If you are in the European Economic Area (EEA), you have certain data protection rights under GDPR:
Our legal basis for processing your information includes consent, contract performance, and legitimate interests.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
We will respond to your inquiry within 30 days of receipt.
For privacy-related matters, or to raise any concerns or grievances regarding the processing of your personal information, you can contact our designated Grievance Officer & Data Protection Officer at:
For users in India, our Grievance Officer will acknowledge and endeavour to resolve your grievances within one month (30 days) from the date of receipt, in accordance with applicable Indian information technology and data protection laws.