Privacy Policy

Welcome to SGI Atithi Setu (available at https://sgiatithisetu.com) and the SGI Atithi Setu POS desktop application. These products and services are exclusively owned, engineered, and maintained by SG INNOVATION PRIVATE LIMITED ("we", "us", "our", or "Company"), a private limited company incorporated in India having its registered office at:

We are committed to respecting and protecting the privacy, security, and confidentiality of all individuals and commercial entities that use our applications, including restaurant operators, cashiers, waitstaff, administrators, and their patrons/diners. This Privacy Policy outlines our transparent data handling practices under the Information Technology Act, 2000, the Digital Personal Data Protection Act (DPDP Act, 2023) of India, Microsoft Store Developer Policies, and globally recognized privacy principles.

This Policy applies to personal and operational data collected across all platforms within the SGI Atithi Setu ecosystem, including:

• The SGI Atithi Setu POS Desktop Application (Windows .exe / macOS terminal application), distributed via Microsoft Store and direct downloads;
• The SGI Atithi Setu Cloud ERP & Web Management Portal hosted at sgiatithisetu.com;
• Customer-Facing Display (CFD) screens, QR Code digital menus, and online ordering web apps;
• Kitchen Order Ticket (KOT) systems and waiter/staff applications;
• Our official APIs, webhooks, and customer support channels.

We collect information either directly from you, automatically through your interaction with our desktop and web applications, or on behalf of restaurants operating the software.

In accordance with Microsoft Store Developer Policies:

• Standard User Privilege Execution: The SGI Atithi Setu POS desktop application executes entirely within standard Windows user mode permissions. It does not require or install custom low-level NT device drivers or kernel-level background services.
• Safe Hardware Interaction: Interaction with POS receipt printers is conducted using standard operating system print spooling interfaces or explicit network TCP sockets configured by the terminal administrator.
• Offline Caching & Cloud Sync: The application incorporates an encrypted local SQLite caching layer so that billing, KOT generation, and drawer kicks continue seamlessly during internet disruptions. Queued transactions synchronize with the cloud API over HTTPS (TLS 1.2+) once network connectivity is re-established.
• Zero Third-Party Ad Tracking: The desktop app is completely free of third-party advertisement SDKs, analytics spyware, or cross-app tracking beacons.

We process the collected data for legitimate business and operational purposes, including:

• Operating and maintaining the POS billing software, kitchen order workflows, and table management;
• Generating accurate tax invoices, sales reports, and GST/VAT tax breakdowns required by fiscal regulations;
• Enabling dual-screen Customer-Facing Displays (CFD) with dynamic order totals and UPI payment QR codes;
• Dispatching order confirmations and digital receipts to diners via SMS or WhatsApp upon their request;
• Enabling third-party food delivery aggregators (e.g., Swiggy, Zomato) menu and order integration when authorized by the restaurant;
• Detecting security threats, authenticating staff with POS security PIN locks, and preventing fraudulent transactions;
• Providing client onboarding, hardware setup guidance, and responsive technical support.

We do not sell, rent, lease, or trade personal data to third parties or marketing brokers. Data is shared only under strict safeguards in the following situations:

• Authorized Service Providers: Trusted cloud infrastructure vendors (secure hosting, database clusters, SMS/email transactional delivery partners) operating under rigorous non-disclosure and data protection contracts.
• Payment Processors: Transaction tokens, amounts, and customer references are shared directly with PCI-DSS certified payment gateways for completing authorized transactions.
• Restaurant Merchant Access: When customers place orders via QR code or online ordering, the relevant restaurant merchant accesses that order data to prepare and deliver the meal.
• Legal & Regulatory Compliance: We may disclose information if required by applicable law, judicial order, subpoena, or statutory government authority to safeguard against fraud or national security compliance.

We deploy robust organizational, administrative, and technological security controls:

• Encryption in Transit & At Rest: All web and API communications utilize HTTPS encrypted with modern TLS 1.2+ protocols. Passwords and sensitive tokens are hashed using industry-standard cryptographic algorithms (Bcrypt/Argon2).
• Role-Based Access Control (RBAC): Multi-tier staff permissions ensure employees (cashiers, chefs, waiters) only access data strictly necessary for their active role. POS terminals feature fast security PIN locking.
• Automated Backups: Cloud data is replicated and backed up periodically with strict access restrictions to prevent data corruption or loss.

We retain restaurant operational and customer billing records for as long as the restaurant maintains an active subscription with SGI Atithi Setu, and for a reasonable statutory duration thereafter as mandated by Indian accounting and commercial taxation standards (typically up to 8 financial years for GST and financial audits). When data is no longer necessary, it is permanently deleted or irreversibly anonymized.

Subject to applicable law, users and diners have the following statutory rights:

• Right to Access: Request a copy of the personal information we maintain concerning you;
• Right to Rectification: Request correction of inaccurate, incomplete, or outdated information;
• Right to Erasure / Account Closure: Request deletion of your personal account data, subject to statutory taxation retention obligations;
• Right to Withdraw Consent: Revoke consent previously provided for optional communications or marketing alerts;
• Right to Grievance Redressal: Submit a formal grievance regarding your personal data handling directly to our designated Grievance Officer.

To exercise any of these rights, please email us at info@sginnovation.in with your registered details.

SGI Atithi Setu is an enterprise hospitality and point-of-sale platform intended exclusively for commercial business operators and adult consumers. We do not knowingly solicit or collect personal information from children under 18 years of age (or under 13 in relevant international jurisdictions). If we discover inadvertent collection of a child's information, we take swift measures to delete it immediately.

We may update this Privacy Policy periodically to reflect enhancements in our desktop POS application, new legislative regulations, or technological improvements. Updated versions will be posted at https://sgiatithisetu.com/privacy-policy with an updated "Last Updated" timestamp. Continued use of our applications following an update constitutes acceptance of the revised terms.

If you have questions, comments, feedback, or grievances regarding this Privacy Policy or our data security procedures, please contact our designated Grievance Officer:

In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, all privacy inquiries and complaints will be acknowledged within 24-48 business hours and resolved within statutory timeframes.