Data rights request

1. Who this document is for

This document is for any individual (“Data Principal”) whose personal data has been processed by Vansera in connection with: (a) a table reservation made by calling or messaging a Vansera-operated phone or WhatsApp number; (b) a conversation with Ishita, Vansera’s AI receptionist, via phone, WhatsApp or the browser demonstration at vansera.in; or (c) a feedback rating sent in response to a post-visit WhatsApp message.

If you are a Client Establishment (a restaurant or cafe that subscribes to Vansera), your data rights are governed by Sections 20–24 of our Terms of Service, not this document.

2. The Data Fiduciary

3. Your rights under the DPDP Act, 2023

The Digital Personal Data Protection Act, 2023 grants you the following rights. Each may be exercised by submitting a verified request as described in Section 4.

3.1 Right of access and summary (Section 11)

You may ask Vansera to provide you with: (a) a summary of the personal data we hold about you; (b) a description of the processing activities carried out with respect to your data; and (c) the identities of all Data Fiduciaries and Data Processors to whom your personal data has been disclosed. We will provide this information within thirty (30) days of receiving a verified request.

3.2 Right of data portability / export (Section 11)

You may request an export of your personal data in a commonly used, machine-readable format. This includes: your booking history (confirmation IDs, reservation dates and times, party sizes, notes), call metadata (channel, duration, outcome), and consent log records (when and how you consented to our processing). We will provide the export within thirty (30) days of receiving a verified request.

3.3 Right of correction, completion and updation (Section 12)

You may ask Vansera to correct any inaccurate or misleading personal data we hold about you, or to complete any data that is incomplete. For example, if a booking was recorded under the wrong name, or your phone number is stored incorrectly, you may request that we correct it. We will action the correction and notify you within thirty (30) days.

3.4 Right of erasure (Section 12)

You may ask Vansera to erase personal data where it is no longer necessary for the purposes for which it was collected. We will delete: (a) your booking records across our SQLite database and the relevant Client Establishment’s Google Sheet; (b) call and WhatsApp transcripts linked to your phone number; (c) consent log entries. Erasure will be completed within thirty (30) days of a verified request. We are not required to erase data that we are obliged to retain under Applicable Law (for example, for tax or audit purposes).

3.5 Right to withdraw consent (Section 6)

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. After withdrawal, Vansera will cease sending you automated reminders and feedback requests. If you have a booking on file, the Client Establishment will be notified so they can follow up directly if needed. To withdraw consent by WhatsApp (the quickest method), reply STOP to any Vansera message. To withdraw by formal request, use the process in Section 4.

3.6 Right to nominate (Section 14)

You may nominate any individual to exercise the rights above on your behalf in the event of your death or incapacity. To register a nominee, submit a written nomination (signed or digitally confirmed) to the Grievance Officer at contact@vansera.in.

3.7 Right of grievance redressal (Section 13)

You may raise a grievance with our Grievance Officer if you believe Vansera has processed your data in a manner that is inconsistent with the DPDP Act or our Privacy Policy. See Section 6 for the escalation path.

4. How to submit a request

To protect you and to prevent a third party from deleting or accessing your data without your knowledge, every formal data-rights request is verified by a one-time password (“OTP”) sent to the WhatsApp number on file. This ensures that only you — the person who controls that number — can act on your data.

4.1 Online (preferred — fastest)

1. Go to https://vansera.in/data-request.
2. Enter your WhatsApp number (the one you used to make a booking or chat with Ishita) and select the type of request.
3. Add any relevant details in the optional text field.
4. Click Send verification code. We will send a 6-digit OTP to your WhatsApp number. The code expires in 10 minutes.
5. Enter the code on the next screen and click Verify and submit.
6. You will see a confirmation that your request has been received and queued for our Grievance Officer.

4.2 By email

Email contact@vansera.in with the subject line Data Request — [your phone number]. We will send an OTP to that number to verify your identity before proceeding. Please include: (a) your full name as it appears on any booking; (b) the type of request (access / correction / erasure / export / withdraw consent / nominate / grievance); (c) any relevant details.

4.3 By post

Write to the Grievance Officer at the registered office address in Section 2, including all the information in Section 4.2. We will contact you at the phone number you provide to complete OTP verification before acting on the request.

5. What happens after you submit

If we cannot complete the request within 30 days (for example, because a legal hold applies or because we need to consult the relevant Client Establishment), we will notify you before the deadline with an explanation and a revised timeline.

6. Grievance Officer and escalation

If your grievance is not resolved to your satisfaction, you may escalate to:

• The Founder & CEO, Mr. Vanshraj Gupta, at contact@vansera.in with subject line Grievance Escalation;
• The Data Protection Board of India, once constituted under the DPDP Act, 2023;
• The Adjudicating Officer under Section 23 of the Information Technology Act, 2000;
• The Consumer Disputes Redressal Commission of competent jurisdiction under the Consumer Protection Act, 2019.

7. Data we hold about you

The following categories of personal data may be held about you, depending on how you interacted with the Service:

Voice audio is not retained. It is processed in real-time for transcription and discarded at the end of the call. We do not store recordings.

8. Statutory references

• Digital Personal Data Protection Act, 2023 — Sections 6 (consent), 7 (legitimate use), 8 (security), 11 (access), 12 (correction and erasure), 13 (grievance), 14 (nomination), 16 (cross-border transfer)
• Information Technology Act, 2000 — Section 43A (reasonable security practices), Section 72A (disclosure in breach of contract)
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Consumer Protection Act, 2019 — applicable to service complaints
• Indian Evidence Act, 1872 — Section 65B (admissibility of electronic records)

This document is a companion to the Vansera Privacy Policy (vansera.in/privacy), Terms of Service (vansera.in/terms), and Contact / Grievance Officer page (vansera.in/contact). In the event of any inconsistency between this document and the Privacy Policy, the Privacy Policy prevails. This document does not constitute legal advice. If you have a rights-based concern you should also consult an advocate or contact the Data Protection Board of India.