Privacy Policy
This Privacy Policy explains how Autoserve Vending Machines Private Limited (“Autoserve”, “we”, “us”, “our”), which operates the Squeeze Station brand of automated fresh orange juice vending machines, collects, uses, stores, shares and protects your personal data.
We are an Indian company and our customers, host sites and machines are in India. This policy is framed under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and, to the extent applicable, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Under the DPDP Act we act as a Data Fiduciary, and you are a Data Principal.
1. Who we are
| Entity | Autoserve Vending Machines Private Limited |
|---|---|
| Brand | Squeeze Station |
| CIN | U56290KA2026PTC222864 |
| GSTIN | 29ABFCA9852R1ZM |
| FSSAI Licence | 21226009003140 |
| Registered office | DivyaSree 77 Town Centre, Yemalur Main Road, Kadubeesanahalli, Marathahalli, Bengaluru, Karnataka 560037, India |
| hello@squeezestation.in | |
| Website | squeezestation.in |
2. What personal data we collect
2.1 When you buy juice from a Squeeze Station machine
- Mobile number — as registered against the UPI account used to pay.
- Name — as supplied to us by the payment gateway from your UPI account.
- Masked UPI handle — we store a masked reference only; we never see or store your UPI PIN.
- Transaction details — amount, date and time, transaction and invoice reference numbers, the product purchased, and the machine and site where the purchase was made.
- Purchase history — a running record of your purchases, used for invoicing, refunds and support.
We do not collect or store your card number, bank account number, UPI PIN, CVV, net-banking credentials or any other payment credential. Payments are processed entirely by our payment gateway, and those details never reach our systems.
2.2 When you submit an enquiry on this website
- Your name, company or establishment name, city, phone number, email address, the type of location, and anything you write in the message box.
2.3 When you contact us directly
- Your contact details and the contents of your call, email or WhatsApp message to us.
2.4 Technical data
- Standard server and application logs generated when you visit this website or when a machine communicates with our systems — including IP address, browser type, pages requested and timestamps. These are used for security, fraud prevention and diagnostics.
2.5 What we do not collect
- We do not operate cameras, and our machines do not record video, images, audio or biometric data of customers.
- We do not collect health data, government identity numbers, or any other sensitive category of data from customers.
3. Why we use your data
We use personal data only for the specified purposes below:
- To complete your purchase and process the payment.
- To issue your GST tax invoice or credit note, and to deliver it to you on WhatsApp at the mobile number registered against your UPI payment.
- To process refunds and handle payment failures.
- To provide customer support and resolve complaints.
- To meet legal and tax obligations under the CGST Act, 2017, the Income-tax Act, 1961, the Companies Act, 2013 and food safety law.
- To operate, monitor and improve our machines — for example, stock levels, service scheduling and detecting faults.
- To respond to a business enquiry you submit on this website, and to follow up about placing a machine at your premises.
We do not sell your personal data. We do not use your purchase data for third-party advertising, and we do not send marketing messages to customers who have only bought juice from a machine.
4. Consent and your choices
Where the DPDP Act requires consent, we ask for it in clear terms at the point of collection — for example, the notice shown on the machine screen at payment, which tells you that a GST invoice will be sent to the WhatsApp number registered against your UPI account.
Some processing is carried out for legitimate uses permitted by the DPDP Act, or because it is necessary to comply with a legal obligation — for instance, retaining invoice records for the period tax law requires. You may withdraw consent at any time by writing to us (see section 10). Withdrawing consent does not affect processing already carried out, and we may still have to keep records the law requires us to keep.
5. Who we share data with
We share personal data only with service providers who process it on our behalf, under contract, and only to the extent needed:
| Recipient | Purpose | What is shared |
|---|---|---|
| PayU (payment gateway) | Processing UPI payments and refunds | Transaction amount and reference; payment credentials are collected by them, not by us |
| Google Cloud / Firebase | Website hosting, database, file storage and backend functions | Transaction records, customer profile, invoices, website enquiries |
| Google Workspace (Gmail) | Our email: receiving the enquiries you submit on this website and replying to you | The details you enter in the enquiry form (name, company, city, phone, email, message) |
| WhatsApp (Meta) | Delivering your invoice or refund confirmation | Your mobile number and the invoice message content |
| Google Fonts | Serving the fonts used on this website | Your IP address, as part of the ordinary web request |
| Our chartered accountant and auditors | Statutory accounting, GST filings and audit | Invoice and transaction records |
We may also disclose personal data where we are required to do so by law, by a court, or by a government or regulatory authority acting under lawful authority.
6. Where your data is stored
Our database, file storage and backend services are hosted in Google Cloud's asia-south1 (Mumbai, India) region. Customer transaction and invoice records are stored in India.
Certain service providers — notably WhatsApp for message delivery, and Google Fonts for website fonts — may process limited data outside India as part of their global infrastructure. The DPDP Act permits such transfers except to countries restricted by the Central Government, and we will comply with any such restriction.
7. How long we keep it
- Invoices, credit notes and transaction records — for the period required by Indian tax and company law, generally up to eight years from the end of the relevant financial year (Section 36 of the CGST Act, 2017 and Section 128 of the Companies Act, 2013).
- Customer profile and purchase history — for as long as needed to support the above and to handle refunds, support and warranty matters.
- Website enquiry submissions — up to 24 months from the date of the enquiry, unless a business relationship begins, in which case the records are retained for the duration of that relationship.
- Technical logs — normally up to 12 months.
Once a retention period ends and no legal obligation requires us to keep the data, we delete or irreversibly anonymise it.
8. How we protect it
- All data in transit is encrypted over HTTPS/TLS.
- Data at rest is encrypted by our cloud provider.
- Access to customer records is restricted to authorised personnel on a need-to-know basis.
- Payment identifiers are masked in our application logs.
- Payment credentials are never stored on our systems.
No system can be guaranteed completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act.
9. Your rights
As a Data Principal under the DPDP Act, you have the right to:
- Access — obtain a summary of the personal data we hold about you and how we process it.
- Correction and completion — have inaccurate or incomplete data corrected, completed or updated.
- Erasure — have your personal data deleted, unless we are required by law to retain it.
- Grievance redressal — raise a complaint with us about how your data is handled (section 10).
- Nomination — nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, write to hello@squeezestation.in from the email address or with the mobile number associated with your record. We may need to verify your identity before acting. We will respond within a reasonable period and, for grievances, within the timeline set out below.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Grievance Officer
In accordance with the DPDP Act, 2023 and the Information Technology Act, 2000 and rules made thereunder, the contact details of our Grievance Officer are:
| Name | Mr. Sachin Gupta |
|---|---|
| Designation | Grievance Officer, Autoserve Vending Machines Private Limited |
| hello@squeezestation.in | |
| Phone | +91 84670 51373 |
| Address | DivyaSree 77 Town Centre, Yemalur Main Road, Kadubeesanahalli, Marathahalli, Bengaluru, Karnataka 560037, India |
| Response time | We acknowledge grievances within 24 hours and aim to resolve them within 15 days of receipt. |
11. Children
Our services are not directed at children. We do not knowingly collect the personal data of anyone under 18 years of age, and we do not carry out behavioural advertising or tracking directed at children. If we become aware that we hold a child's personal data without verifiable consent from a parent or lawful guardian, we will delete it. If you believe we hold such data, please contact our Grievance Officer.
12. Cookies and tracking
This website does not use advertising cookies, and we do not currently run analytics or advertising trackers on it. Your browser will contact Google's font servers to load the fonts used on this site, which makes your IP address visible to Google in the ordinary course of that request.
If we introduce analytics or advertising tools in future, we will update this policy and obtain consent where the law requires it.
13. Links to other websites
This website and our messages may contain links to third-party sites, including our payment gateway. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies.
14. Changes to this policy
We may update this Privacy Policy from time to time. The revised version will be posted on this page with a new “Last updated” date. Where changes are significant, we will take reasonable steps to bring them to your notice.
15. Contact us
Questions about this policy or about how we handle your data?
Email hello@squeezestation.in or call
+91 84670 51373.