Privacy Policy – ShevaFood

At ShevaTechs Pte. Ltd. ("ShevaFood", "we", "our" or "us"), your privacy matters to us. This Privacy Policy describes how we handle your personal information when you access or use our website (https://www.shevafood.com) and our platform.

By using our services, you agree to this Privacy Policy and the collection, use, and storage of your information as described herein.

1. Who We Are

ShevaTechs Pte. Ltd. 68 Circular Road, Singapore (049422) Email: contact@shevafood.com

We operate a SaaS platform providing dynamic QR codes, digital menu creation, click and collect functionality, and additional marketing and analytics tools for professionals in the food and hospitality industries.

2. Information We Collect

We may collect the following types of personal data:

• Identity data: Full name
• Contact data: Email address
• Account data: Encrypted password, account preferences
• Technical data: IP address, browser type and version, device information, timezone, language settings
• Transaction data: Subscription status, transaction history (via secure payment gateway)
• Usage data: Service usage metrics, session interactions, content accessed
• Communication data: When you contact us — or when we onboard you — through WhatsApp, we process your phone number in international format (E.164), the content of the messages you exchange with our team (including any photos, documents, audio or video you attach), delivery metadata returned by Meta (timestamps, status codes), and any opt-out signal you send (e.g. "STOP"). These messages may be processed by our AI assistant (see section 7) to draft replies in your language.
• Cookies and similar technologies: Used to facilitate navigation, functionality, analytics, and personalization (see section 6).

We collect this information either directly from you or automatically when you interact with our website or our official WhatsApp account.

3. How We Use Your Information

We may use your information to:

• Provide and operate our services
• Authenticate users and maintain accounts
• Process payments and send billing notifications
• Communicate updates, system messages, or service changes
• Onboard partners and provide customer support via WhatsApp, including automated replies generated by our AI assistant in your preferred language
• Translate messages between your language and the language of our team members, when needed, to make support possible across markets
• Improve service performance and user experience
• Comply with applicable legal and regulatory obligations

We do not sell your personal data to third parties.

4. Legal Grounds for Processing

We process your data on the basis of:

• Your consent
• The necessity to perform a contract
• Our legitimate interests (platform security, customer support, marketing, analytics)
• Legal obligations

You can withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Retention of Data

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Generally, your data will be retained until:

• You request deletion of your account
• We determine it is no longer needed for business or legal purposes
• A reasonable period of inactivity has elapsed

6. Cookies and Tracking

Our platform uses cookies and similar technologies for various purposes. This may include session management, performance analytics, and experience optimization.

We may also use anonymous or aggregate tracking to better understand platform usage. You can manage your cookie preferences through your browser settings or via the cookie banner on our website.

7. Data Sharing and Subprocessors

We may share personal information with carefully selected partners and service providers who help us deliver our platform. The main categories are:

• Payment processors
• Cloud infrastructure providers
• Email and notification services
• Usage analytics tools
• Messaging providers (WhatsApp / Meta) — see below
• AI assistance providers (OpenAI) — see below

Meta Platforms, Inc. — WhatsApp Business Cloud API

When you communicate with us through WhatsApp, your phone number and the content of your messages (including any media) are processed by Meta Platforms, Inc. on the WhatsApp Business Cloud API to deliver the messages to and from our team. Meta acts as a processor on our behalf for this routing role.

Data processed by Meta: phone number in E.164 format, message content, media files you send, delivery and read receipts, opt-out signals.

Location of processing: United States and other jurisdictions where Meta operates infrastructure. International transfers are covered by the Standard Contractual Clauses adopted by the European Commission.

Retention by Meta: message content is retained by Meta for up to 30 days for routing purposes; media files for the same window. We retain copies on our own infrastructure for the duration described in section 5.

How to stop: reply STOP (or any local equivalent) to any of our WhatsApp messages — we will record the opt-out, halt all future automated outreach, and remove your number from our active messaging lists. You may also email us at the contact address in section 12 to request opt-out.

OpenAI, L.L.C. — AI message generation and translation

To help our team support partners across many languages, we use OpenAI's API to (i) draft replies to your messages and (ii) translate messages between your language and the language of the team member handling your account. OpenAI acts as a processor on our behalf.

Data processed by OpenAI: the text content of recent messages in the relevant conversation (typically up to the last 20 exchanges) and the language hints needed for translation. We do not transmit your phone number, payment details, or identity documents to OpenAI.

Location of processing: United States. Transfers are covered by the Standard Contractual Clauses adopted by the European Commission.

Retention by OpenAI: per OpenAI's API data usage policy, API content is retained for up to 30 days for abuse-monitoring purposes and is not used to train OpenAI's models. We do not store OpenAI's intermediate outputs beyond what is needed to send the final reply through WhatsApp.

We ensure all third parties are subject to confidentiality and data protection obligations consistent with applicable laws, including the EU GDPR.

8. Security of Your Information

We implement reasonable security practices and procedures to protect your data. This includes access controls, secure protocols, and regular reviews of system performance and infrastructure. However, no online service can be 100% secure.

9. International Transfers

Your data may be stored and processed in countries other than your own, including Singapore (where our company is headquartered), the United States (where Meta and OpenAI operate infrastructure — see section 7), and other jurisdictions where our infrastructure or third-party providers operate. When we transfer data internationally, we take appropriate measures to ensure its protection, such as the Standard Contractual Clauses adopted by the European Commission or equivalent safeguards.

10. Your Rights (EU and GDPR)

If you are located in the European Economic Area, you have the right to:

• Request access to your personal data
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Request data portability
• Lodge a complaint with a supervisory authority

You can exercise these rights at any time by contacting: contact@shevafood.com

11. Changes to This Privacy Policy

We may revise this Privacy Policy to reflect changes in our services, legal obligations, or industry standards. When we update the policy, we will post the revised version on our website and update the "Last updated" date.