Privacy Notice
Last updated: 14 September 2026
This notice explains how Humsum, the provider of Saffron Café OS, collects and uses personal data. Humsum is the data controller for the personal data described here. For data that our café customers enter about their own staff and guests, the café is the controller and Humsum acts as processor on their instructions.
Personal data we collect
- Account data — name, email address, phone number and login credentials.
- Business data — café name, address, GST/FSSAI numbers, logo and settings.
- Operational data you enter — menu items, orders, bills, staff accounts and customer records such as name, phone and visit history.
- Support data — messages and attachments you send us.
- Technical data — IP address, device and browser information, log and usage data, and error reports.
Why we use it and our legal basis
- To create your account and provide the Service — performance of our contract.
- To take payment and manage subscriptions — performance of our contract.
- To keep the Service secure and prevent fraud or abuse — our legitimate interests.
- To provide customer support — performance of our contract.
- To improve and troubleshoot the product — our legitimate interests.
- To send service or marketing emails — consent, which you can withdraw at any time.
- To meet accounting and legal obligations — legal obligation.
Who we share it with
- Service providers and subprocessors that host our infrastructure, database, storage and error monitoring.
- Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, subscription management, invoicing and tax compliance.
- Professional advisers such as accountants and lawyers, where necessary.
- Authorities, where we are required to do so by law.
We do not sell personal data.
International transfers
Our providers may process data outside your country. Where that happens we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.
Retention
We keep account and operational data for as long as your subscription is active and for a reasonable period afterwards so you can reactivate or export it. Data we no longer need is deleted or anonymised. Transaction records are kept for as long as tax and accounting law requires.
Security
We use appropriate technical and organisational measures, including encryption in transit, role-based access control and database-level isolation so that each café can only access its own data.
Your rights
Subject to the law that applies to you, you may request access to your personal data, ask us to correct or delete it, restrict or object to processing, request portability, or withdraw consent. You may also complain to your local data protection authority. Contact us at support@humsum.in and we will respond within one month.
Cookies and similar technologies
We use essential cookies and browser storage to keep you signed in and to remember your preferences. We do not use advertising cookies. You can clear or block cookies in your browser settings, but the app will not work correctly without the essential ones.
Contact
Humsum — support@humsum.in