Scope & Parties Involved
This Privacy Policy applies to AuraDine (a product powered by Zubitics AI, referred to as "we", "us", "our", or "AuraDine"). It outlines our practices regarding data processing for two distinct user groups:
- Restaurant Partners (Tenants): Food & beverage venues, hospitality outlets, bars, clubs, franchises, and their authorized staff members utilizing the AuraDine management portal, POS billing, and campaign engines.
- Diners & Guests (End-Users): Individuals interacting with a venue via WhatsApp AI concierges, table reservation links, digital POS receipts, event ticket checkout, and feedback workflows.
Categories of Data We Collect
To deliver real-time hospitality automation, AuraDine processes the following categories of information:
A. Diner & Guest Reservation Data
Full name, WhatsApp phone number (MSISDN), reservation date and timeslot, party size (stag, couple, group counts), seating zone preference (indoor, rooftop, VIP), special dietary/anniversary notes, and historical visit frequencies.
B. Conversational Transcripts & Intent Telemetry
Complete inbound and outbound message histories between diners and the AuraDine WhatsApp AI Concierge, natural-language booking intents, food inquiry dialogues, voice note transcriptions, and customer support escalation logs.
C. Commercial & Restaurant Operational Data
Restaurant legal entity name, regulatory/tax identifiers, floor layouts, table configurations, full digital menus with descriptions and pricing, inventory recipes, Kitchen Order Tickets (KOT), staff activity records, and daily sales summaries.
D. Transaction & Billing Records
Bill line-items, discounts applied, taxes (CGST/SGST), payment mode (Cash, UPI, Card, Online), transaction settlement timestamps, and digital receipt delivery tokens.
How Your Data is Stored & Protected
All AuraDine data is securely saved, maintained, and protected across hardened, resilient cloud-based infrastructure within high-security enterprise facilities:
- Data-at-Rest Security: All system databases, cached communication channels, and media repositories are safeguarded with industry-standard cryptographic protection.
- Data-in-Transit Encryption: All client communications, webhook transmissions, and administrative sessions are strictly enforced over authenticated HTTPS and secure encrypted transport protocols.
- Tenant Isolation: AuraDine enforces strict multi-tenant data partitioning, ensuring that each restaurant's menus, reservations, financial metrics, and customer contacts remain entirely segregated and inaccessible to other venues.
AI Processing, Hospitality Intelligence & Meta Compliance
Meta Platform Terms & Real-Time AI NoticeCompliance with Meta Platform Terms (Section 3.a.viii)
In strict adherence to Meta’s Developer Policies and Platform Terms, AuraDine and Zubitics AI do not use Meta Platform Data, WhatsApp conversational messages, or diner personal information to build, train, or improve any general artificial intelligence or machine learning models (including foundation models or LLMs).
Artificial Intelligence within AuraDine is utilized strictly as an execution engine to serve real-time hospitality operations:
- Real-Time Dialogic Inference: Passing active guest queries to reasoning pipelines strictly in ephemeral runtime sessions to understand dining intents (such as dietary questions, table availability, or menu inquiries) and deliver immediate automated replies.
- Operational Hospitality Analytics: Generating venue-specific, fully anonymized statistical aggregates (such as peak table occupancy hours, kitchen preparation time estimates, and general seating turnover rates) exclusively for the respective restaurant tenant’s management reporting.
- Zero Third-Party Model Training: Conversational transcripts are never sold, licensed, or shared with third-party AI training repositories or external data brokers.
- User Data Privacy & Revocability: Data processing is performed strictly with user authorization to fulfill reservation and ordering services. Users retain full rights to revoke authorization and mandate erasure at any time.
WhatsApp Cloud API & Meta Sub-processing
AuraDine integrates directly with the official Meta WhatsApp Cloud API. When a guest sends a message to a restaurant's registered WhatsApp Business Number:
- The message is processed through Meta's secure cloud infrastructure and delivered in real-time to AuraDine's dedicated webhooks.
- AuraDine parses the prompt, invokes AuraDine AI models to construct the autonomous dining reply, and dispatches the response via the WhatsApp Cloud API.
- Both AuraDine and Restaurant Partners are bound by the Meta WhatsApp Business Messaging Policy.
Billing, POS & Payment Data
Financial and billing processing is governed with strict compliance controls:
- Online Gateways: Online reservation advance deposits, event pass ticket checkouts, and restaurant prepaid messaging credit purchases ("AuraDine Bites") are processed by licensed, PCI-DSS compliant payment gateways. AuraDine does not store credit/debit card numbers or confidential banking credentials.
- POS Receipts & Taxes: POS billing calculations (CGST, SGST, service charges, delivery fees, and discount coupons) are processed on cloud servers and recorded solely for the restaurant's operational, accounting, and tax compliance reconciliation.
Third-Party Services & Infrastructure
To maintain high availability, data redundancy, and seamless guest experiences, AuraDine collaborates with vetted enterprise technology providers under strict confidentiality agreements:
- Secure Cloud Infrastructure: Dedicated cloud-based environments providing resilient computing, automated backups, and 24/7 high-availability infrastructure.
- Enterprise Messaging Gateways: Official authorized WhatsApp Business Cloud messaging infrastructure for transactional confirmations and interactive dining concierge dialogues.
- Autonomous AI Processing: AuraDine AI proprietary reasoning pipelines for real-time natural language comprehension and automated table reservation assistance.
- Regulated Payment Processors: Certified, PCI-DSS compliant banking and payment partners for secure transaction settlements, ticket sales, and digital wallet reloads.
All third-party partners operate under strict non-disclosure obligations and are legally prohibited from utilizing customer or diner data for their own independent marketing or commercial purposes.
Restaurant Operator Obligations & Consent
Restaurant partners utilizing AuraDine's marketing broadcasts, automated win-back campaigns, and customer CRM tools affirm and agree that:
- The restaurant has obtained lawful consent (opt-in) from diners before importing guest lists or dispatching promotional WhatsApp broadcasts.
- The restaurant will honor guest opt-out requests immediately (e.g. when a diner replies "STOP" or "CANCEL").
- AuraDine strictly disallows unsolicited spam, bulk scraping, or unauthorized promotional broadcasts.
Data Retention & User Data Deletion Instructions
Facebook / Meta / WhatsApp Data Erasure ProcedureIn accordance with Meta Platform Rules, GDPR, and Indian DPDP standards, AuraDine provides clear, accessible, and automated mechanisms for any user or diner to request the permanent deletion of their personal data.
Step-by-Step Meta / WhatsApp User Data Deletion Instructions
If you have interacted with an AuraDine restaurant concierge via WhatsApp or booked a reservation through our platform, you can have all your personal information, contact records, and conversational logs completely purged by following these steps:
Submit Deletion Request
Send an email to [email protected] with the subject line "Data Deletion Request" along with your phone number, or reply "DELETE MY DATA" directly inside the restaurant’s WhatsApp chat.
Verification & Queuing
Our compliance desk verifies your request within 48 hours and queues all linked diner profiles, reservation history, and conversation tokens for cryptographic purging.
Permanent Erasure
All associated records are permanently erased across production databases within 30 calendar days. A confirmation email or SMS is issued to you once the process is complete.
Data Retention Periods
- Active Reservations & Inquiries: Retained only as long as necessary to facilitate the requested restaurant booking or dining service.
- Restaurant Tenant Decommissioning: Upon cancellation of an AuraDine restaurant subscription, all operational and guest records are archived for a maximum of 30 calendar days for tenant export, after which they are permanently expunged.
- Legal & Tax Compliance: Invoiced tax records (e.g. GST billing logs) are maintained strictly as mandated by applicable statutory accounting regulations.
Security & Encryption Standards
AuraDine enforces rigorous multi-layered defense safeguards across its cloud infrastructure, including automated intrusion mitigation, real-time rate limiting across all API endpoints, secure data access control architecture, granular role-based access control (RBAC), and continuous monitoring to ensure comprehensive system integrity and guest data protection.
Updates to this Policy
As AuraDine develops new autonomous capabilities, this policy may be amended. We will notify active restaurant partners via dashboard alerts or WhatsApp broadcasts of material changes. Continued use of the platform constitutes acceptance of revised terms.
Grievance Officer & Inquiries
In accordance with applicable privacy regulations, questions, concerns, or requests regarding this Privacy Policy may be directed to: