Timbuckdo Platform Privacy Notice
Effective Date: 12 March 2026
This Privacy Notice explains how Timbuckdo Innovations Private Limited (“Timbuckdo”, “Company”, “we”, “us”, or “our”) collects, uses, processes, stores, and protects personal data when users access or use the Timbuckdo platform, including the website and mobile application (collectively, the “Platform”).
For the purposes of applicable data protection laws, including the Digital Personal Data Protection Act, 2023, Timbuckdo Innovations Private Limited acts as the Data Fiduciary, responsible for determining the purposes and means of processing personal data collected through the Platform.
This Privacy Notice describes:
By accessing, registering on, or using the Platform, you acknowledge that your personal data may be collected and processed in accordance with this Privacy Notice and applicable laws.
Timbuckdo may collect personal data that users voluntarily provide, as well as certain information generated through the use of the Platform and its services.
When users create an account on the Platform, the following information may be collected:
Where applicable, the Platform may collect information necessary to verify eligibility for student-related opportunities, including:
When users access or interact with the Platform, certain technical information may be automatically collected, including:
Information relating to the user’s interaction with the Platform may be collected, including:
Where identity verification is required for specific Platform features or regulatory compliance, verification may occur through secure third-party authentication mechanisms, such as DigiLocker or other government-authorized verification systems.
Timbuckdo does not store copies of identity documents submitted through such systems. Only the verification status or limited metadata necessary to confirm successful verification may be retained for operational, security, or compliance purposes.
Timbuckdo processes personal data for legitimate operational, service delivery, and compliance purposes associated with the functioning of the Platform.
Personal data may be processed for the following purposes:
· creating, verifying, and managing user accounts
· enabling gig discovery, participation, and related platform activities
· administering Donut reward programs, incentives, and promotional campaigns
· verifying eligibility and preventing fraud, abuse, or misuse of the Platform
· processing restaurant discount redemptions and related transactions
· responding to user inquiries, support requests, or grievance submissions
· improving platform performance, security, and functionality
· maintaining records necessary for dispute resolution and enforcement of platform policies
· complying with applicable legal, regulatory, or statutory obligations.
Personal data will be processed for lawful purposes that are reasonably necessary for the operation of the Platform and the services provided through it, and in accordance with applicable data protection laws.
By registering on or using the Platform, users provide consent for the collection and processing of their personal data for the purposes described in this Privacy Notice and in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023.
Users may withdraw consent for certain processing activities at any time by contacting the Company through the contact details provided in this Privacy Notice.
Please note that withdrawal of consent may affect the availability or functionality of certain services on the Platform where the processing of personal data is necessary for service delivery.
Users may also approach the Data Protection Board of India where a grievance relating to personal data processing is not satisfactorily resolved through the Company’s grievance redressal mechanism.
Timbuckdo does not sell personal data to third parties.
Personal data may be shared only in the following limited circumstances and for legitimate operational or legal purposes.
Timbuckdo collects only personal data that is reasonably necessary for the operation of the Platform and the services provided through it.
Organizations and partners offering gigs, campaigns, or promotions through the Platform may independently collect personal data from users in connection with such activities.
Where such collection occurs outside the Platform’s systems, the respective organization acts as an independent data fiduciary and is responsible for complying with applicable data protection laws in relation to such processing.
Personal data may be shared with trusted third-party service providers supporting the operation of the Platform, including:
Such service providers process personal data solely for operational purposes on behalf of Timbuckdo and are contractually required to maintain appropriate confidentiality and security safeguards..
Personal data may be disclosed where required to comply with:
For restaurant discount redemption features available on the Platform, restaurant partners receive limited transactional information necessary to confirm redemption, including:
Restaurant partners are prohibited from attempting to identify users or collect additional personal data through the redemption process.
The Platform may include automated chat tools, chatbots, or AI-assisted support systems designed to help users navigate the Platform, obtain information, or receive basic support.
Messages submitted through chatbot interfaces may be processed by trusted third-party AI service providers for the limited purpose of generating automated responses and improving the quality and functionality of support services.
Such processing is carried out in accordance with applicable privacy and security standards.
Users are advised not to share sensitive personal information such as identity numbers, financial details, passwords, or other confidential information during chatbot interactions.
Where AI tools are used to generate automated responses, such responses are intended for informational assistance and may not always be complete or accurate.
Timbuckdo primarily processes personal data using secure infrastructure and technology services provided by trusted service providers supporting the operation of the Platform.
In certain circumstances, where infrastructure providers or service providers operate across multiple jurisdictions, personal data may be processed or accessed from locations outside India.
Where such cross-border processing occurs, Timbuckdo implements reasonable safeguards, contractual protections, and security measures to ensure that personal data continues to receive an appropriate level of protection consistent with applicable data protection laws, including the Digital Personal Data Protection Act, 2023.
Timbuckdo endeavors, wherever feasible, to process and access personal data within the relevant regional or local infrastructure environments of its service providers, while ensuring operational reliability and security.
Timbuckdo implements reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or destruction.
These safeguards may include measures such as:
Timbuckdo also restricts access to personal data to authorized personnel and service providers who require such access for legitimate operational purposes.
While the Company takes reasonable steps to safeguard personal data, users acknowledge that no digital system or method of transmission over the internet can guarantee absolute security.
Timbuckdo retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Notice.
Personal data may be retained for the following purposes:
Where users request deletion of their accounts, Timbuckdo will take reasonable steps to delete or anonymize personal data associated with the account, except where retention is required for legal compliance, dispute resolution, fraud prevention, or other legitimate operational purposes.
In such cases, personal data may be retained for a limited period as permitted or required under applicable laws before being securely deleted or anonymized.
The Platform is intended for individuals who are 18 years of age or older, and the services provided through the Platform are designed for users who are legally capable of entering into binding agreements.
Timbuckdo does not knowingly collect or process personal data from children below the age permitted under applicable law without appropriate consent mechanisms.
If the Company becomes aware that personal data has been collected from a child in violation of applicable laws, Timbuckdo will take reasonable steps to promptly delete such data and may suspend or terminate the associated account where necessary.
Parents or legal guardians who believe that personal data relating to a child has been submitted to the Platform may contact the Company using the contact details provided in this Privacy Notice.
Subject to applicable laws, including the Digital Personal Data Protection Act, 2023, users may exercise certain rights in relation to their personal data.
Users may request:
Where permitted under applicable law, users may also request the withdrawal of consent previously provided for the processing of their personal data.
Requests relating to personal data rights may be submitted through the contact details provided in this Privacy Notice. Timbuckdo will make reasonable efforts to review and respond to such requests within the timeframe required under applicable law.
This Privacy Notice may be updated from time to time to reflect changes in:
Any updated version of this Privacy Notice will be published on the Platform with a revised “Effective Date” indicating when the changes take effect.
Users are encouraged to periodically review this Privacy Notice to remain informed about how their personal data is collected, used, and protected.
For privacy inquiries, requests relating to personal data, or grievance redressal, users may contact the designated officer below:
Bhuvana Anand
Grievance Officer and Data Protection Officer
Timbuckdo Innovations Private Limited
Email: help@timbuckdo.com
Users may contact the Grievance Officer for matters relating to:
The Company will make reasonable efforts to acknowledge and respond to privacy-related inquiries or grievances within the timeframe required under applicable law, including the Digital Personal Data Protection Act, 2023.
Policy Version: 1.0
Effective Date: 12 March 2026
Last Updated: 12 March 2026