Privacy Policy
Version: 2.0 · Prepared 27 October 2026 · Effective date: date actually published on Gensouk website
GENSOUK ENTERPRISES PRIVATE LIMITED
CIN: U47912PB2026PTC069897 · GSTIN: 03AANCG4573C1ZR
Registered office: House No. 2537, Tibbi Sahib Road, Near Ram Bhawan, Sri Muktsar Sahib, Punjab – 152026, India
Grievance officer: Harish Pathela · Email: gensoukofficial@gmail.com · Phone: +91 90415 90072
Support: Monday–Saturday, 10:00 AM–6:00 PM IST (telephone); email enquiries may be submitted at any time.
1. Who we are
Gensouk is a marketplace operated by GENSOUK ENTERPRISES PRIVATE LIMITED (“Gensouk”, “we”, “us”). Our services may connect customers with independent shops, restaurants and delivery partners in supported areas. We may also publish separate property advertisements or enquiries if that service is enabled. This notice covers our website, app, onboarding, ordering, support and associated services. Specific third-party services have their own privacy notices.
2. Personal information we process
Depending on your role and actions, we may process: name, mobile number, email and login identifiers; delivery and business addresses; order items and instructions; seller or restaurant identity; invoices, payment references, transaction and refund history; account preferences; messages, tickets, complaints and feedback; device, IP, app-version, diagnostic and anti-fraud information; and user-submitted location or, with applicable permissions, device location.
For seller and restaurant onboarding, we may require authorised representative details, business registrations, GSTIN or permissible enrolment number, FSSAI details where applicable, bank settlement information and verification documents. For delivery partners, we may process onboarding identity and bank information, relevant vehicle/licence records, accepted assignments, proof of collection/delivery, COD reconciliation and location related to active delivery work where enabled and appropriately disclosed.
If property listings are available, we may process advertiser contact details, listing particulars, uploaded photographs, location descriptions and enquiry messages. We do not seek unrelated sensitive device data, and we do not require precise GPS access merely to browse where manual location selection is available.
3. Why we use information
We use necessary information to create and secure accounts, authenticate mobile numbers, display serviceable shops and restaurants, facilitate orders and payments, process invoices, settle merchants, coordinate delivery, support users, investigate suspected fraud and comply with legal, tax and accounting requirements. We may use relevant information for service quality, error diagnosis and lawful analytics. Optional marketing requires the appropriate permission or other lawful basis; it is not a condition of receiving essential order updates.
4. OTP and account security
We may use Supabase authentication and an SMS provider such as MSG91 if the relevant integration is activated. We share the minimum information needed to send and validate login or delivery messages. Never share your OTP, UPI PIN, card PIN or CVV with any caller. We do not claim that any proposed integration is live until enabled in production.
5. Location and delivery
You may select or enter an address manually where supported. If you permit GPS access, it may be used for address selection and serviceability. Rider location may be processed for assignment, pickup, active delivery, safety and dispute resolution, only as configured and disclosed. Location permissions can be managed on your device, although certain location-dependent features may cease to work.
6. Who receives your information
The relevant shop or restaurant receives the information required to prepare and supply your order. An assigned delivery partner receives only pickup, drop-off and customer-contact information necessary for that assignment. In a combined shopping order, retailers should not receive other retailers’ confidential invoices, margins or unrelated records. Payment processors, messaging providers, hosting, authentication, technical support and other contracted service providers may receive purpose-limited information as required. Seller and rider partners must not repurpose customer contact information for unrelated solicitation. We may share information with authorities where required by law, or to protect rights and safety.
7. Payments
Where activated, Cashfree or another authorised payment service may handle prepaid transactions, payment verification, settlement and refunds. Our systems may receive payment status, transaction IDs, method category and limited masked payment information. Customers should enter sensitive card or banking credentials only in the designated authorised payment flow. We do not intend to store complete card numbers, CVVs, net-banking passwords or UPI PINs on Gensouk's servers.
8. Marketing, cookies and analytics
Order confirmation, fraud alerts, login OTPs and critical support messages are service communications. Promotional SMS, WhatsApp, email and push communications, if introduced, will follow applicable consent, preference and telecom rules and offer opt-out mechanisms where required. The website may use essential session technology and technical analytics. Optional advertising trackers must be disclosed and configured lawfully before use. We do not sell personal data to unrelated advertisers.
9. Retention
We keep records only for operational and legally justified periods. Account information can generally be removed following a verified deletion request, except where continued retention is necessary for tax invoices, payment reconciliation, accounting, security investigations, disputes or another lawful requirement. Appropriate deletion, anonymisation or access restriction will follow when retention is no longer justified. Actual retention schedules must be documented internally and aligned with statutory rules.
10. Security
We seek to use appropriate technical and organisational controls, including authentication, access separation by role, secure transport, restricted access to financial data, monitoring, logs and incident handling. No online system can guarantee absolute security. We will investigate suspected personal-data breaches and notify affected individuals and regulators where legally required. This notice is not a claim of independent security certification or audit.
11. Your privacy choices and requests
Contact gensoukofficial@gmail.com to request access information, correction, updating, deletion, withdrawal of applicable consent, or grievance resolution, to the extent provided under law and subject to permitted verification and retention exceptions. As applicable provisions of the Digital Personal Data Protection Act, 2023 and its Rules commence, we will provide the notices and processes required by them. Withdrawing optional marketing consent must not interfere with necessary order and security messages.
12. Account deletion
You may request account closure using the app mechanism if implemented or by emailing gensoukofficial@gmail.com with the subject “Gensouk Account Deletion”. We will verify control of the account, explain any outstanding obligations and delete or restrict records according to lawful retention requirements. This is a request channel, not a representation that a fully automated deletion tool already exists. App-store requirements may require an additional public web deletion page.
13. Children
Independent customer accounts and purchases are intended for people aged 18 and above. If we become aware that a child independently registered contrary to this rule, we may restrict the account and handle the information lawfully. We do not knowingly target children with behavioural advertising.
14. International processing
Some authorised technology suppliers may operate infrastructure outside India. Cross-border handling will be reviewed against applicable restrictions, contracts and security requirements. We do not promise that all data is stored in India unless the deployment has been verified.
15. Links and independent partners
Shops, restaurants, payment processors and property advertisers may have separate legal duties in respect of information they process for their own lawful purposes. External websites may have their own notices. Gensouk remains responsible for its own legal obligations.
16. Changes and grievance contact
Material changes will be posted with a revised date, and fresh consent sought where law requires it. Privacy and consumer grievances may be sent to Harish Pathela, Grievance Officer, at gensoukofficial@gmail.com, +91 90415 90072, at the registered office stated above. We will handle complaints within applicable statutory timelines. A policy change does not retrospectively authorise processing that requires consent.
17. Applicable law
This notice operates subject to applicable Indian laws, including the Information Technology Act, 2000, relevant rules and the Digital Personal Data Protection Act, 2023 and rules as their operative provisions take effect. Mandatory legal rights are unaffected.
18. App-store disclosure and account deletion
The policy URL must remain public, work without a login, and be available within the Gensouk application. Users creating accounts must be able to initiate deletion from inside the app and through a readily accessible public website request method. Requests made to gensoukofficial@gmail.com are accepted, subject to verification; the Company will delete data that no longer has a lawful retention basis and explain any retained statutory records. Deleting the app alone does not delete the account. The app's Apple privacy labels and Google Play Data safety responses will describe actual production SDKs, permissions and data flows; this notice is not a substitute for those disclosures.
19. Payment-fraud checks and processor choice
Where activated, payments may be routed through Cashfree Payments or Razorpay, or another duly authorised provider. Only the provider used for the relevant transaction receives payment information needed to process, investigate, settle or refund that transaction; relevant fraud, dispute and chargeback information may also be processed. The applicable processor's privacy notice is available through the payment interface or its official website. Payment methods may vary according to eligibility and activation. We do not represent that both processors are live.
20. Specific permissions and optional access
Gensouk does not require access to a customer's contacts, microphone, call logs or SMS inbox to place ordinary marketplace orders. If the application later offers camera access (for barcode scanning, evidence uploads or other specific features), media/photo access, notifications or location access, it will request the appropriate device permission and explain the purpose in context. Background location, if required for riders, must have a separate role-specific disclosure, least-privilege permission and use limited to the notified purpose. Refusal of optional permissions must not prevent unrelated features.
21. Data accuracy, processor inventory and incident response
Gensouk maintains an internal record of production integrations and categories of information exchanged. Data collected by payment, authentication, marketing, crash-reporting and analytics SDKs must be reflected consistently in this policy, app disclosures and the Google Play/Apple questionnaires. The Company will take reasonable security measures, investigate incidents, preserve necessary evidence and meet applicable breach notification duties as relevant provisions become effective. Actual deletion and retention periods will be maintained in an internal retention schedule.
22. DPDP commencement and contact
India's Digital Personal Data Protection framework is phased. Provisions relating to consent managers commence in November 2026 and principal obligations concerning notices, consent, data-principal rights and safeguards are scheduled for May 2027 under current notifications. Before those provisions apply, Gensouk will implement clear purpose-specific notices, withdrawal mechanisms where required, access/correction/erasure handling, nomination handling where applicable, and lawful processing of children's data. Contact for privacy requests: gensoukofficial@gmail.com; subject: Privacy Request — Gensouk. Nothing here asserts that a future statutory entitlement is already operative.