Data Protection & Platform Governance

BiteShare Privacy Policy

Effective Date: August 2026. Comprehensive breakdown of how BiteShare collects, handles, and protects user data across our hyper-local surplus food marketplace, financial ledger, and ESG impact network.

1. Information We Collect

To facilitate food waste redistribution, process atomic claims, and maintain financial integrity, BiteShare collects specific user data based on your platform role (Food Donor, Community Recipient, or Platform Administrator):

Account & Profile Identity

Email address, encrypted authentication tokens, full name, phone number, and user role selection.

Store & Shelter Details

Restaurant or organization name, street address, city, state, pincode, and operating pickup windows.

Claim Records & Security PINs

Claimed food items, item quantities, total prices, claim status, and unique 4-digit pickup verification PINs.

Financial & Fee Accounting

Gross order sales GMV, 12% platform fee deductions, 88% store net payout totals, and rolling fee settlement status.

2. Geolocation & Auto GPS Detection

Proximity matching is critical for rescuing fresh surplus meals before expiration. BiteShare utilizes background GPS detection and dynamic address geocoding:

  • Automatic Background Location: When creating food listings, browser GPS coordinates (latitude/longitude) are automatically captured to place listings accurately on the marketplace map.
  • Dynamic Address Geocoding: If GPS is disabled, our system dynamically geocodes typed street addresses via Nominatim API to attach verified map coordinates.
  • No Continuous Tracking: Location permissions are used strictly during active session browsing to sort nearby food items and calculate distance. We do not track your movement when the application is closed.
Zero Data Monetization Guarantee

BiteShare is built on community trust. We never sell, lease, trade, or monetize your personal details, order histories, phone numbers, or business sales data to third-party advertisers or data brokers.

3. Platform Fee, Invoicing & Financial Ledger

BiteShare operates a transparent financial model to sustain platform maintenance, real-time channels, and server hosting:

12% Platform Commission: BiteShare retains a 12% platform fee on completed claims, allocating 88% net earnings directly to donor stores.
Rolling Balance & FIFO Settlement: Unpaid fees are tracked in an itemized rolling balance. Fee payments recorded by admins clear claims chronologically using First-In, First-Out (FIFO) accounting.
Admin Financial Ledger: Financial summaries are accessible exclusively to authorized BiteShare administrators for auditing, billing statement generation, and RFC 4180-compliant CSV exports.

4. Counter Verification & Pickup PIN Handshakes

To prevent fraud, unauthorized claims, and missing orders at store counters:

  • 4-Digit Security PIN: Every confirmed claim generates a unique 4-digit PIN that must be presented at the restaurant counter to verify the order.
  • Handshake Confidentiality: Contact details (recipient phone number and name) are shared with the store staff only after a reservation is confirmed to coordinate smooth handover.

5. ESG Metrics & CSR Impact Certification

BiteShare calculates environmental sustainability statistics (Meals Rescued, CO₂ Emissions Offset, and Economic Value Diverted):

  • Aggregated ESG Analytics: Claim data is converted into aggregated environmental savings reports for corporate ESG reporting.
  • Official CSR Certificates: Partner businesses receive verifiable high-resolution CSR Certificates carrying a unique cryptographically generated Certificate ID (`BS-CSR-YYYY-XXXX`).

6. Database Security & Row-Level Policies (RLS)

BiteShare employs enterprise database security policies to ensure strict data isolation and protection:

Row-Level Security (RLS)PostgreSQL policies ensure users can strictly access and modify only their own profiles and claim histories.
Encrypted Auth & RecoveryAll passwords are salted and hashed. Password recovery flows utilize secure tokens redirected directly to `/update-password`.

7. Controlled Operational Infrastructure Sharing

Your data is stored and processed exclusively by verified cloud infrastructure providers operating under strict data protection agreements:

  • Database Hosting: Supabase PostgreSQL (Managed cloud database with automated backups).
  • Application Deployment: Vercel Edge Network (Secure serverless hosting).
  • Legal Compliance: Information may be disclosed if required by law or local food health authorities during official food safety inquiries.

8. Your Data Rights & Account Controls

You retain complete authority over your personal information on BiteShare:

  • Profile Updates: You can edit your phone number, business address, and store details anytime on the profile settings page.
  • Account Erasure: You have the right to request complete account deletion and data scrubbing by contacting our privacy team.
Have questions about our Privacy Policy?Contact our platform data protection officer at support@biteshare.in