Plate 8
Book a demo

Privacy policy

Last updated: 2026-10-20

1. Introduction

This policy explains how Plan and Pixel LLC (“Plan and Pixel”, “we”, “us”) handles personal and operational data on Plate 8 — our website, mobile apps, and the restaurant operations platform behind them (together, the “Service”). By signing up, logging in, or otherwise using the Service you accept the practices described below. Questions can be sent to hello@plate8.io.

2. Information we collect

We collect only what we need to run Plate 8 for you and your restaurant:

  • Contact details — your name, work email, mobile number, restaurant name, role, and GSTIN where applicable.
  • Account data — login credentials, authentication tokens, in-app preferences, and your Plate 8 profile.
  • Operational data you put into the platform — inventory counts, recipe bills of materials (BOM), store roster and shift data, purchase orders, supplier records, menu items, sales, and labour entries.
  • POS sync data — order, menu, modifier, discount, and settlement records pulled from the POS systems you connect (for example Petpooja, Rista, Posist, UrbanPiper).
  • Voice recordings — when a user dictates an order, count, or note into Plate 8, we capture the audio clip so we can transcribe it, run quality checks, and improve speech accuracy.
  • Bill images and OCR output — photographs or PDFs of supplier bills, kitchen notes, or stock sheets that you upload, plus the structured text and line items our OCR engine extracts from them.
  • Device and media permissions — camera, microphone, and photo library access only when you grant it, used to capture bill images, voice notes, and inventory photos.
  • WhatsApp and SMS data — mobile numbers of suppliers and staff you add, consent records, and the text of purchase-order and reminder messages we send on your behalf.
  • Push notification tokens — issued by Apple or Google so we can deliver alerts to the right device.
  • Automatically collected data — IP address, device model, OS version, browser, app version, and usage events.
  • Cookies and similar technologies — for session management, preferences, and product analytics.
  • Communications — support tickets, feedback, call recordings with our team, and in-app chats.

3. How we use your information

We use the data above to:

  • run, maintain, and improve the Service, including recipe costing, variance reports, and demand forecasts;
  • transcribe and index voice recordings and bill images so counts, orders, and invoices become searchable records;
  • sync, reconcile, and attribute POS data against your inventory and recipe BOM;
  • schedule shifts and distribute roster updates to your store team;
  • send operational messages — purchase orders to suppliers, shift reminders to staff, invoice confirmations — through WhatsApp, SMS, or email on your behalf;
  • send product notices, security alerts, and billing information;
  • investigate support requests and respond to you;
  • detect fraud, abuse, and security incidents;
  • comply with legal and tax obligations (including GST reporting support and record-keeping under the Information Technology Act, 2000).

4. Messaging programme (WhatsApp, SMS, email)

Plate 8 sends messages to your suppliers and staff on your instruction. We follow TRAI’s commercial communication rules, WhatsApp Business policy, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

  • Consent. A supplier or staff member must opt in themselves — through a Plate 8 opt-in link, a signed vendor onboarding form, or by replying with a start keyword. You may invite a supplier to opt in, but you cannot provide consent for them. Enrolling with Plate 8 is never conditional on receiving marketing messages.
  • Frequency. Varies with your purchasing cadence and roster activity.
  • Opt-out. Replying STOP, EXIT, or UNSUBSCRIBE on SMS, or using WhatsApp’s native block or stop controls, ends further messages. Recipients can also email hello@plate8.io.
  • Charges. Standard carrier message and data charges may apply to the recipient.
  • Sharing. Supplier and staff contact data is not sold and is not shared for third-party marketing. It is passed only to the registered telemarketer, aggregator, or communication platform needed to deliver your message.
  • Delivery. Neither Plate 8 nor the carrier is responsible for messages that fail to reach a device because of a disconnected number, blocked route, carrier outage, or an incompatible handset.

5. How we share your information

We do not sell personal data. We share it only in these situations:

  • Service providers — cloud hosting, analytics, voice transcription, OCR, payments, SMS and WhatsApp aggregators, and email delivery, each bound by a written data processing contract.
  • POS and integration partners — only to the extent needed to run the integration you have authorised with them.
  • Legal and regulatory requests — when disclosure is required under Indian law, including the DPDP Act, the IT Act, GST law, or an order from a court or authorised authority.
  • Business transfers — in a merger, acquisition, reorganisation, or asset sale, with reasonable advance notice to you.
  • With your consent — any other sharing you specifically ask us to do.

6. Data retention

We keep operational data while your Plate 8 account is active and for as long as needed to deliver the Service. Specific points:

  • POS sync data, bill images, OCR output, inventory counts, recipe BOM, store roster, and voice recordings are retained for the length of your subscription plus any period required for tax, audit, or statutory record-keeping.
  • WhatsApp and SMS opt-out requests are processed within 5 working days; the opt-in and opt-out audit trail itself is retained for compliance reasons.
  • We do not use your restaurant’s data, your suppliers’ data, or your staff’s data to train general-purpose AI models. Models used inside Plate 8 for speech, OCR, and demand forecasting are trained on consented, anonymised, or synthetic data and tuned only for your own tenant.
  • Deletion requests are actioned within 30 days, subject to retention required by law.

7. Data security

We follow reasonable security practices and procedures as expected under the IT Act and the DPDP Act. These include encryption in transit (TLS 1.2+) and at rest, role-based access controls, least-privilege engineering access, logging and monitoring, and periodic third-party assessments. No system is perfectly secure, and we cannot guarantee absolute protection.

8. Your rights

Under the DPDP Act and related rules, you can:

  • access the personal data we hold about you;
  • ask for correction of inaccurate or incomplete data;
  • ask for erasure once the purpose is served, subject to retention required by law;
  • nominate another person to exercise your rights in the event of death or incapacity;
  • withdraw a consent you previously gave, and raise a grievance.

Send requests to hello@plate8.io. If you are unsatisfied with our response, you may approach the Data Protection Board of India. Our Grievance Officer under the IT Act is reachable at the same address.

9. Children

Plate 8 is a business tool and is not aimed at anyone under 18. We do not knowingly collect data from children. If we learn a child’s data has reached us, we will delete it promptly.

10. Cross-border transfers

Plate 8 is operated from India and most data is processed on servers located in India. Where a sub-processor processes data outside India — for example a global OCR or voice provider — we transfer data only to jurisdictions permitted under the DPDP Act and under contractual safeguards.

11. Changes to this policy

We will post updates on this page and change the “Last updated” date. Material changes will be flagged inside Plate 8 or by email. Continued use of the Service after an update means you accept the new version.

Deleting your Plate 8 account

To close your personal Plate 8 account, email hello@plate8.io from the address on your account with the subject “Delete my Plate 8 account”. Please do not send passwords. You can also use the in-app “Delete account” option, which removes your sign-in identity, personal profile, and personal preferences. Restaurant-owned records — POS history, bills, recipe BOMs, inventory counts, roster entries, and purchase orders — stay with the restaurant that owns the Plate 8 workspace. We respond within 30 days and explain any data we must keep and for how long. Deleting your personal account does not terminate the restaurant’s subscription with Plan and Pixel LLC.

12. Contact us

For privacy questions, grievances, or DPDP Act requests, write to hello@plate8.io. For general queries, hello@plate8.io.