Privacy Policy
This explains what Command collects, why, and what you can ask us to do about it. Written in plain English on purpose — if something here is unclear, that's our bug, not yours.
Last updated 25 July 2026
Draft notice: this document is written to match how the product actually behaves, but it has not yet been reviewed by a lawyer. Get Indian counsel to review it before you rely on it commercially.
What we collect
Account and contact details you give us: name, restaurant name, phone, email, city.
Operational data your outlets generate through the platform: bills, orders, inventory movements, staff shifts. This is your business data — we process it to run the service for you.
Basic technical logs: IP address, device and browser type, and error traces, used to keep the service working and secure.
What we don't do
We don't sell your data. We don't rent it, and we don't share it with advertisers.
We don't use your customers' personal information to build profiles for anyone else.
Where your data lives
Operational data for Indian customers is stored in India. The point-of-sale application also keeps a local copy on your own machine so billing continues during an internet outage; it syncs to the cloud when the connection returns.
Your rights under the DPDP Act
You can ask for a copy of your personal data, ask us to correct it, or ask us to erase it. You can withdraw consent for optional processing at any time.
To exercise any of these, contact us using the details below. We aim to respond within 30 days.
Retention
We keep operational records for as long as your account is active, plus the period Indian tax and accounting law requires. After that, records are deleted or irreversibly anonymised.
Sub-processors
We use a small number of infrastructure and communication providers to deliver the service. A current list is available on request, and we require each of them to meet the standards described here.