This Privacy Policy ("Policy") describes how Corpela SMC-PRIVATE. Ltd., operating under the brand Entellra ("Entellra," "we," "us," or "our"), collects, uses, discloses, and safeguards information in connection with our AI-powered restaurant management platform, including our website, web application, mobile applications, APIs, and related services (collectively, the "Services"). This Policy applies to restaurant owners and staff who use our Services ("Customers") and, where applicable, the end customers of our Customers whose data is processed through the Services ("End Users").

1. Scope and Roles

Entellra provides software that restaurants use to manage point-of-sale transactions, orders, reservations, staff, customer relationships, WhatsApp-based ordering, and AI-powered call handling. In providing these Services:

• When we collect information from our Customers (restaurant owners, managers, and staff) to create and manage accounts, bill for the Services, and provide support, we act as a Data Controller.
• When our Customers use the Services to collect and process information about their own guests and customers (End Users) — such as names, phone numbers, order history, and reservation details — we act as a Data Processor on behalf of our Customers, who remain the Data Controller of that End User information.

This Policy explains both relationships. If you are an End User of one of our restaurant Customers and have questions about how your personal data is used, please contact that restaurant directly, as they control the data collected through their use of the Services.

2. Information We Collect

2.1 Account and Business Information

• Business name, business type, and business address
• Owner/administrator name, email address, and phone number
• Staff member names, roles, and login credentials
• Tax identification and billing information

2.2 Payment Information

Payment card and transaction details are collected and processed by our third-party payment processors (including Stripe and Razorpay). Entellra does not store full payment card numbers on its own servers.

2.3 Restaurant Operational Data

• Menu items, pricing, and inventory data entered by Customers
• Order records, table and reservation data
• Staff schedules, permissions, and performance data

2.4 End User (Guest) Data Processed on Behalf of Customers

• Names, phone numbers, and WhatsApp contact details
• Order history, preferences, and reservation details
• Call recordings and transcripts generated through the AI Call Agent feature (see Section 5)
• Messages exchanged through WhatsApp Business integration

2.5 Technical and Usage Information

• Device information, IP address, browser type, and operating system
• Log data, timestamps, and feature usage analytics
• Cookies and similar tracking technologies (see Section 12)

3. How We Use Information

We use the information described above to:

• Provide, operate, maintain, and improve the Services
• Process transactions and send related confirmations and invoices
• Operate the AI Call Agent and WhatsApp automation features on behalf of Customers
• Generate analytics, reports, and dashboards for Customers
• Provide customer support and respond to inquiries
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity
• Comply with applicable legal and regulatory obligations
• Send administrative communications, including updates to this Policy or our Terms & Conditions
• With consent, send marketing communications about new features or offerings

4. Legal Bases for Processing

Where applicable data protection law requires a legal basis for processing, we rely on one or more of the following:

• Performance of a contract — to provide the Services our Customers have subscribed to
• Legitimate interests — to operate, secure, and improve our Services, provided such interests are not overridden by the individual's rights
• Consent — for optional features such as marketing communications or specific AI processing where required by law
• Legal obligation — to comply with applicable law, regulation, or valid legal process

5. AI Call Agent and Automated Processing

Entellra's AI Call Agent feature uses automated voice technology to answer incoming calls to a Customer's restaurant, handle reservation requests, respond to order inquiries, and answer frequently asked questions. In connection with this feature:

• Calls handled by the AI Call Agent may be recorded and transcribed for the purposes of fulfilling the caller's request, quality assurance, and improving the accuracy of our AI systems
• Callers may be notified, where required by applicable law, that they are interacting with an automated system and that the call may be recorded
• Customers (restaurants) are responsible for ensuring that their use of the AI Call Agent feature complies with applicable call-recording consent laws in their jurisdiction
• Call data and transcripts are stored securely and are accessible to the relevant Customer through their Entellra dashboard
• We may use anonymized or aggregated call data to train, evaluate, and improve our AI models. Where such data includes personal information, we apply appropriate de-identification measures

6. How We Share Information

We do not sell personal information. We may share information in the following circumstances:

• With our Customers — operational and End User data collected through the Services is made available to the restaurant Customer that collected it
• With service providers — vendors who perform services on our behalf, such as cloud hosting, payment processing, and communications infrastructure, under contractual confidentiality and data protection obligations
• With delivery and communications partners — such as Foodpanda, Careem, and WhatsApp Business, where a Customer has enabled these integrations
• For legal reasons — to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Entellra, our Customers, or others
• In connection with a business transaction — such as a merger, acquisition, financing, or sale of assets, subject to standard confidentiality arrangements

7. Third-Party Integrations

Entellra integrates with the following categories of third-party services. Each operates under its own privacy policy, which we encourage Customers and End Users to review:

• Payment processors: Stripe, Razorpay
• Delivery platforms: Foodpanda, Careem
• Communications: WhatsApp Business Platform (operated by Meta)
• Cloud infrastructure and hosting providers

Entellra is not responsible for the privacy practices of these third parties, which operate independently and are governed by their own terms and privacy policies.

8. Data Retention

We retain personal information for as long as necessary to provide the Services, fulfil the purposes described in this Policy, and comply with our legal obligations. Specifically:

• Account and business information is retained for the duration of the Customer's subscription and for a reasonable period thereafter for legal, accounting, and dispute-resolution purposes
• Call recordings and transcripts are retained for [Insert Retention Period, e.g., 12 months] unless a longer period is required by law or requested by the Customer
• Data is deleted or anonymized upon expiry of the applicable retention period, or upon a valid deletion request, subject to any legal retention requirements

9. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Data Transfers

Entellra may process and store information on servers located outside the country in which a Customer or End User is located, including in jurisdictions that may have different data protection laws. Where required, we implement appropriate safeguards to ensure such transfers comply with applicable law.

11. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we (or, where applicable, our Customer) hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, subject to legal exceptions
• Object to or restrict certain processing activities
• Request a copy of your data in a portable format
• Withdraw consent, where processing is based on consent

Requests relating to End User data collected by a restaurant Customer should generally be directed to that Customer, as the Data Controller. Requests relating to Customer account data may be directed to us using the contact details in Section 16.

12. Cookies and Tracking Technologies

Our website and web application use cookies and similar technologies to operate core functionality, remember preferences, and understand usage patterns. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Services.

13. Children's Privacy

The Services are intended for business use by adults operating restaurants and are not directed at children. We do not knowingly collect personal information from children under the age of 18. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

14. Restaurant Customer (End User) Data

Our Customers are responsible for ensuring they have the necessary legal basis, notices, and consents in place to collect and process their own End Users' personal information through the Services, including compliance with applicable marketing, communications, and data protection laws in their jurisdiction. Entellra provides the platform and processes such data solely on the Customer's instructions and for the purpose of delivering the Services.

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Policy with a revised "Last Updated" date, and where changes are material, we will provide additional notice as required by applicable law.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Entellra (Corpela SMC-Pvt. Ltd.)

Email: privacy@entellra.com