Privacy

Privacy at Last Bite

Last Bite is built around the principles of India’s Digital Personal Data Protection Act (DPDP), 2023. We collect the minimum data needed to place a Swiggy order on your behalf and to honour the three-gate confirmation flow.

What we store

Phone number. The WhatsApp number you contact us from. Used as your account identifier.

BYOC bearer token. Your personal Swiggy MCP OAuth token, captured from your Claude Desktop session. Encrypted at rest in Upstash Redis with a 30-day TTL. Never logged, never displayed, never shared.

Order context. The cart you confirmed, the gates you passed, the order ID Swiggy returned. Retained for 30 days for receipts and dispute support.

What we do not store

Payment instruments. Last Bite is COD-only.

Free-text WhatsApp messages outside an active order.

Your Swiggy account password. We never see it.

Third parties

Swiggy receives the order details required to fulfil your request via the Swiggy MCP server. Gupshup transports your WhatsApp messages. Upstash Redis holds short-lived state. We don’t sell your data, ever.

Your rights

You can revoke your BYOC token at any time by emailing privacy@lastbite.fun. We’ll wipe your token, cart history, and pending grace timers within 24 hours.

Powered by Swiggy

Last Bite is a third-party agent that uses your personal Swiggy MCP connection. The Swiggy logo and the “Powered by Swiggy” mark appear on every surface that renders Swiggy data. Last Bite is not affiliated with or endorsed by Swiggy.

Back to Last Bite