Your data is yours.

In Back office, open Reports and choose “Download all my data”. You get spreadsheet (CSV) files for orders, bill lines, payments, refunds, cash movements, shifts, expenses, invoices, your menu, tables, staff, devices and more.

Amounts are in rupees with two decimals and times are in Indian Standard Time. The downloads stay available if you cancel or move down to Starter, and they only ever contain your own café’s records.

You can cancel any time; you keep access until the end of the month you paid for. After that your records stay readable and you can still download them. Cancel from Back office, Nivala Subscription. Details on the refund and cancellation page.

Staff see only what their role allows. Settings that matter, such as the staff list, devices and the café’s UPI ID, are for owners only. When the UPI ID changes, every owner is emailed the old and the new one.

A cashier cannot keep guessing an owner PIN to approve their own cancellations: after 10 wrong owner or manager PINs in a day, those PINs lock and the owners are emailed.

You decide what guest details you enter. Under India’s Digital Personal Data Protection Act, 2023, your café decides why they are collected and Nivala handles them on your behalf, only to run Nivala for your café. We never use them for our own marketing. A guest asks the café first, and we help you answer within 30 days.

• Bills, payments, refund bills and tax records: at least 8 years from the end of the financial year they belong to, because Indian GST law needs them.
• Other account details: deleted when you ask, except what the law requires us to keep.
• Nightly encrypted copies of the database: deleted after 30 days.
• Sign-in attempt records: deleted after 30 days. Server logs: within 90 days.
• A café whose email was never confirmed, that never paid and was not signed into for 30 days: name, email and phone removed and the account closed.

Your café’s data is stored outside India today, in Singapore, with encrypted backups in the USA. If India’s rules for sending data abroad change, we will tell you. Each company above only gets what it needs to do its job.

Menu photos. If you choose to create your menu from photos, we send these photos to our reading service (Google Gemini) to extract dish names and prices. We do not keep the photos. We keep only the number and size of the photos read, to apply fair-use limits.

Your guests pay into your own UPI QR, UPI speaker or card machine. Nivala does not take guest payments and does not check them with your bank. Your staff record what was paid and how.

Data questions and complaints: hello@thenivala.com. We answer within 30 days. Full wording: Privacy and Terms.