Privacy notice

How Audit Eats collects and uses your personal data, under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.

What we use your data for

Providing our compliance services. Preparing and filing your FSSAI registration, licence, renewal, modification and annual return applications on FoSCoS; arranging training and audits; invoicing; and contacting you about your applications. Documents you upload are read automatically on our own servers to fill in forms and to mask Aadhaar numbers.

The personal data we hold

Data	Items	Kept for
Account details	Full name, email address, mobile number	While your account is open, then erased on request subject to legal holds
Business and premises details	Business and legal name, PAN, GSTIN, addresses, premises contact person and phone, turnover	While the licence is held and for 8 years after, for tax and FSSAI records
Identity and business documents	Copies of PAN, Aadhaar, photographs, address proof, partnership deeds, board resolutions and other documents FoSCoS requires	While the licence is held and for 8 years after, then erased
Food handler and trainee details	Name, email and phone of staff you enrol for FoSTaC training	For the validity of the training certificate
Payments and invoices	Amounts, invoice details, payment references (no card or bank credentials)	8 years, as GST law requires
Enquiries	Name, email, phone and business name from enquiry forms	2 years from last contact unless you become a client
Security and activity logs	Actions taken in your account, IP address, browser type	At least 1 year (DPDP Rule 6); identifiers are anonymised on erasure

Who processes it for us

Supabase, database, authentication and file storage (Japan (AWS ap-northeast-1)): all data listed in this notice.
Vercel, application hosting (Global edge network; functions in the United States): request data in transit, including ip address.
Resend, transactional email (United States): name, email address and email content.

Your rights

Ask for a summary of the personal data we hold about you and how it is processed.
Ask us to correct, complete or update it.
Ask us to erase it, where we are not required by law to keep it.
Nominate another person to exercise these rights if you die or become incapable.
Raise a grievance with us, and if unresolved, complain to the Data Protection Board of India.
Withdraw consent at any time, as easily as you gave it.

Contact

Grievance Officer, Audit Eats, support@auditeats.com. We answer within 90 days.

Notice version 2.