Privacy policy

Last updated: 2 November 2026

Tallzy explains the payouts restaurants receive from food delivery platforms such as Zomato and Swiggy. This policy says what we collect, why, and what we never do. Questions: aman@tallzy.com.

What we collect

• Your sign-in email address and the people you invite to your account.
• The payout files you upload, forward, or that we import from a Gmail inbox you connect, and the figures we calculate from them.
• Settings you choose, such as your take-home target and how to treat certain payout lines.

Connecting Gmail

If you connect a Gmail inbox, Tallzy asks Google for read-only access. We only search for emails from Zomato and Swiggy payout addresses (billing@zomato.com, payments@swiggy.in, dip-prod@swiggy.in) that carry an Excel attachment, and we only read those attachments, the sender and the subject line. We never read, store or process any other email, and we never send, change, label or delete anything in your inbox. Access is stored encrypted, and you can disconnect at any time from Settings; we then revoke it with Google.

Tallzy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data for advertising, do not sell it, do not use it to train AI models, and no person at Tallzy reads it except with your permission to fix a problem, for security, or where the law requires.

How we use your data

• To show you where each rupee of your payouts went, and alerts about your own numbers.
• To run and secure the service. We do not sell your data or share it with other restaurants.

Where it is kept

Data is stored with Supabase (database and files) and the app runs on Vercel. Forwarded emails pass through Postmark. Each account's data is separated in the database so no other account can read it.

Your choices

You can disconnect Gmail, remove people from your account, or ask us to delete your account and all its data by writing to aman@tallzy.com. We delete it within 30 days.