Privacy Policy
Last updated on [10/01/2025]
This Privacy Policy (“Policy”) describes the policies and procedures of the collection, use, disclosure and protection of your information when you use our website located at www.Pyng.co.in, or the Pyng mobile applications (collectively, “Platform”) made available by Swiggy Limited (“Pyng”, “Company”, “we”, “us” and “our”), a company established under the laws of India having its registered office at No.55 Sy No.8-14, Ground Floor, I&J Block, Embassy Tech Village, Outer Ring Road, Devarbisanahalli, Bengaluru – 560103.
This Policy is published in compliance with, inter alia:
1. Section 43A of the Information Technology Act, 2000 (“IT Act”);
2. Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (“SPDI Rules”); and
3. Regulation 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediary Guidelines”).
The terms “you” and “your” refer to the user of the Platform. The term “Services” refers to any services offered by Pyng whether on the Platform or otherwise.
Please read this Policy before using the Platform or submitting any personal information to Pyng. This Policy is a part of and incorporated within, and is to be read along with, the Terms of Use (“Terms”). For the purposes of this Policy, unless defined hereunder, all capitalized terms shall have the meaning ascribed to them in the Terms. By using the Platform, or the Services, you confirm that you have read, understood, and agree with the privacy practices described in this Policy, and the Terms and the collection, storage and processing of your information in accordance with them.
By accessing or using the Platform, or the Services, or by otherwise giving us your information, you confirm that you have the capacity to enter into a legally binding contract under the Indian Contract Act, 1872, and have read, understood, and agree with the privacy practices described in this Policy, and the collection, storage and processing of your information in accordance with them. Please go through this Policy in detail and contact us if you have any questions or require any clarifications.
If you are under 18 years of age, then please do not use or access the Service(s) at any time or in any manner. If you are a parent or guardian and discover that your child under 18 years of age has obtained an account on or otherwise accessed the Service, then you may alert us at support@pyng.co.in
As a Merchant, you agree to comply with this obligation, and to otherwise comply with any data correction, erasure, deletion or other similar obligations.
As a Merchant, you undertake not to collect (or otherwise cause or permit the collection of) any data relating to children to honour any access, correction, deletion or disclosure requirements promptly and efficaciously, and in an event, no later than is required under applicable law.
By using the Platform and the Services, you agree and consent to the collection, transfer, use, storage, disclosure and sharing of your information as described and collected by us in accordance with this Policy. If you do not agree with the Policy, please do not use or access the Platform. If you are accessing or using Services or the Platform from an overseas location, you do so at your own risk, and shall be solely liable for compliance with any applicable local laws.
As a Merchant, you undertake to comply with applicable law and notify Customers and obtain their consent for collection, use and further sharing of their personal data by you as the Merchant.
We may occasionally update this Policy and the updated Policy will be posted on this page. If we make any significant changes to this Policy we will endeavor to intimate you of such changes, such as via prominent notice on the Platform or to your email address on record and where required by applicable law, we will obtain your consent. To the extent permitted under the applicable law, your continued use of the Services following the changes to this Privacy Policy will constitute your consent and acceptance of those changes.
The Platform may contain links to other websites and similar other features. Your use of such websites and/or features may result in the collection, processing or sharing of information about you, depending on the website/feature. Any personal information about you collected whilst visiting such websites/feature is not governed by this Policy, unless specifically mentioned otherwise. Swiggy shall not be responsible for and has no control over the practices and content of any website/feature accessed using such links contained on the Platform. This Policy shall not apply to any information you may disclose to any of our service providers/service personnel which we do not require you to disclose to us or any of our service providers under this Policy. We strongly encourage you to read such third parties' privacy policies.
You further acknowledge and agree that we are not liable for any loss or damage which may be incurred by you as a result of the collection and/or disclosure of your information by the Merchants, partners or via third party websites, as a result of any reliance placed by you on the completeness, accuracy or existence of any advertising, services, or other materials on, or available via such third party links. This will include all transactions, and information transmitted therein, between you and any such third-party sites or applications or resources, such transactions are strictly bi-partite. We shall not be liable for any disputes arising from or in connection with such transactions between you and the aforementioned third parties.
Our Platform and third parties with whom we partner, may use cookies, pixel tags, web beacons, mobile device IDs, “flash cookies (wherever applicable)” and similar files or technologies to collect and store information with respect to your use of the Services and third-party websites.
Cookies are small files that are stored on your browser or device by websites, apps, online media
and advertisements. We use cookies and similar technologies for purposes such as:
A pixel tag (also called a web beacon or clear GIF) is a tiny graphic with a unique identifier, embedded invisibly on a webpage (or an online ad or email), and is used to count or track things like activity on a webpage or ad impressions or clicks, as well as to access cookies stored on users’ computers. We use pixel tags to measure the popularity of our various pages, features and services. We also may include web beacons in e-mail messages or newsletters to determine whether the message has been opened and for other analytics.
To modify your cookie settings, please visit your browser’s settings. By using our Services with your browser settings to accept cookies, you are explicitly consenting to our use of cookies in the manner described in this section.
We may also allow third parties to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs and other technologies to identify your device when you visit the Platform and use our Services, as well as when you visit other online sites and services.
Please see our Cookie Polic[d]y for more information regarding the use of cookies and other technologies described in this section, including regarding your choices relating to such technologies.
We use the information we collect for following purposes, including:
We may share your information that we collect for following purposes:
With Service Providers: We may share your information with our vendors, consultants, marketing partners, research firms and other service providers or business partners, such as payment processing companies, for the purposes listed above. For example, your information may be shared with outside vendors to send you emails and messages or push notifications to your devices in relation to our Services, to help us analyze and improve the use of our Services, to process and collect payments. We also may use vendors for other projects, such as conducting surveys or organizing sweepstakes for us.
With Merchant: While you place a request for service through the Platform, your information is provided to us and to the Merchants. In order to facilitate your online service processing, we provide your information to that Merchant in a similar manner as if you had placed an order directly with the Merchant. If you provide a mobile phone number, Swiggy may send you text messages regarding the service provision status.
With Academic Partners: We may share your information with our academic partners for the purpose of carrying out academic research in an anonymized and/or de-identified manner.
For Crime Prevention or Investigation: We may share this information with governmental agencies or other companies assisting us, when we are:
-Obligated under the applicable laws or in good faith to respond to court orders and processes; or
-Detecting and preventing against actual or potential occurrence of identity theft, fraud, abuse of Services and other illegal acts;
-Responding to claims that an advertisement, posting or other content violates the intellectual property rights of a third party;
-Under a duty to disclose or share your personal data in order to enforce our Terms of Use and other agreements, policies or to protect the rights, property, or safety of the Company, our customers, or others, or in the event of a claim or dispute relating to your use of our Services.
-This includes exchanging information with other companies and organisations for the purposes of fraud detection and credit risk reduction.
For Internal Use: We may share your information with any present or future member of our “Group” (as defined below) or affiliates for our internal business purposes. The term “Group” means, with respect to any person, any entity that is controlled by such person, or any entity that controls such person, or any entity that is under common control with such person, whether directly or indirectly, or, in the case of a natural person, any Relative (as such term is defined in the Companies Act, 1956 and Companies Act, 2013 to the extent applicable) of such person.
With Advertisers and advertising networks: We may work with third parties such as network advertisers to serve advertisements on the Platform and on third-party websites or other media (e.g., social networking platforms). These third parties may use cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs and other tracking technologies to measure the effectiveness of their ads and to personalize advertising content to you.
You cannot opt out of advertising on the Platform, you may opt out of much interest-based advertising on third party sites and through third party ad networks (including DoubleClick Ad Exchange, Facebook Audience Network and Google AdSense). For more information, visit www.aboutads.info/choices. Opting out means that you will no longer receive personalized ads by third parties ad networks from which you have opted out, which is based on your browsing information across multiple sites and online services. If you delete cookies or change devices, your opt out may no longer be effective.
To fulfill the purpose for which you provide it.
We may share your information other than as described in this Policy if we notify you and you consent to the sharing.
We have in place appropriate technical and security measures to secure the information collected by us.
We use vault and tokenization services from third party service providers to protect the sensitive personal information provided by you. The third-party service providers with respect to our vault and tokenization services and our payment gateway and payment processing are compliant with the payment card industry standard (generally referred to as PCI compliant service providers).
You are advised not to send your full credit/debit card details through unencrypted electronic platforms. Where we have given you (or where you have chosen) a username and password which enables you to access certain parts of the Platform, you are responsible for keeping these details confidential. We ask you not to share your password with anyone.
Please be aware that the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through the Platform. Once we have received your information, we will use strict physical, electronic, and procedural safeguards to try to prevent unauthorised access.
If you suspect any unauthorized use of your account, you must immediately notify us by sending an email to the contact details indicated in the contact section. You shall be liable to indemnify us due to any loss suffered by us due to such unauthorized use of your account or password.
Under certain circumstances, we shall not be able to take your prior consent before disclosing your information in case the information is demanded by government agencies or otherwise mandated under law to obtain SPDI, or during investigation of cyber incidents, prosecution of offenses etc.
Further, we shall not be responsible for any breach of security or for any actions of any third parties or events that are beyond our reasonable control including but not limited to acts of government, computer hacking, unauthorised access to computer data and storage device, computer crashes, breach of security and encryption, poor quality of internet service or telephone service of the Merchant, Customer etc.
As a Merchant, to the extent you collect SPDI of Customers, you agree to comply with your obligations of having in place reasonable security measures, in accordance with applicable law.
OPT-OUT/ Withdrawal of Consent
When you sign up for an account, you are opting in to receive emails from Pyng. You can log into manage your email preferences or you can follow the “unsubscribe” instructions in commercial email messages, but note that you cannot opt out of receiving certain administrative notices, service notices, or legal notices from Pyng.
If you wish to withdraw your consent for the use and disclosure of your personal information in the manner provided in this Policy or you want your data to be deleted, please write to us at support@pyng.co.in. Please note that we may take time to process such requests, and your request shall take effect no later than 5 (Five) business days from the receipt of such request, after which we will not use your personal data for any processing unless required by us to comply with our legal obligations. We may not be able to offer you any or all Services upon such withdrawal of your consent.
If you have any queries relating to the processing or usage of information provided by you in connection with this Policy, please email us at support@pyng.co.in or write to our Grievance Officer at the following address:
Swiggy Grievance Officer
No.55 Sy No.8-14, Ground Floor, I&J Block, Embassy Tech Village, Outer Ring Road, Devarbisanahalli, Bengaluru – 560103
If you come across any abuse or violation of the Policy, please report to support@pyng.co.in Further, please note that the Platform stores your data with the cloud platform of Amazon Web Services provided by Amazon Web Services, Inc., which may store this data on their servers located outside of India. Amazon Web Services has security measures in place to protect the loss, misuse and alteration of the information, details of which are available at https://aws.amazon.com/. The privacy policy adopted by Amazon Web Services are detailed in https://aws.amazon.com/privacy. In the event you have questions or concerns about the security measures adopted by Amazon Web Services, you can contact their data protection / privacy team / legal team or designated the grievance officer at these organisations, whose contact details are available in its privacy policy, or can also write to our Grievance Officer at the address provided above.
MISCELLANEOUS
Disclaimer: We cannot ensure that all of your Personal Data and SPDI will never be disclosed in ways not otherwise described in this Policy. Therefore, although we are committed to protecting your privacy, we do not promise, and you should not expect, that your information or private communications will always remain private. While using the Platform or availing any of our Services, you understand and agree that you assume all responsibility and risk for your use of the Platform, and Internet generally, and the information you post or access and for your conduct on and off the Platform.
Indemnity: You agree and undertake to indemnify us in any suit or dispute by any third party arising out of disclosure of information by you to third parties either through our Platforms or otherwise and your use and access of websites, applications and resources of third parties.
Severability: Each clause of this Policy shall be and remain separate from and independent of and severable from all and any other clauses herein, except where otherwise expressly indicated or indicated by the context of the Policy. The decision or declaration that one or more clauses are null and void shall have no effect on remaining clauses of this Policy.
Limitation of Liability: The Company shall not be liable for any consequential, incidental, special, indirect, exemplary or punitive damages, or damages for any loss of profits, revenue or business, regardless of the nature of the claim, even if the Company has been notified of the possibility of such damages.
Governing Law and Jurisdiction: This Policy shall be governed by the laws of India as applicable between residents of India without regard to any principles of conflict of laws. Subject to the Terms of use, any and all disputes arising hereunder shall be subject to the exclusive jurisdiction of the courts at Bangalore, India.