Privacy

Who we are

Ordro is software that lets a small business take orders over WhatsApp and the web: a menu link for customers, an order queue for the shop, and a merchant app for the shop's staff and riders. When you order from a shop, that shop is the business you are buying from; Ordro runs the software they use. Ordro is operated from Dubai, United Arab Emirates. Questions and requests about your data: privacy@ordro.in.

This policy covers three kinds of people: customers who order from a shop, shop staff who use the Ordro portal or app, and riders who deliver orders with the app.

Customers

What we store

Your phone number (the WhatsApp number you message from), your name if you give one, the delivery addresses you save, the map pin you share for a delivery, and the orders you place. That is the whole list. We do not buy data about you and we do not sell yours.

What a shop can see

A shop sees the orders you placed with them, the name and number you gave them, your delivery address and pin, and any note you left. A shop never sees that you have ordered anywhere else on Ordro, not even as a count. A phoned-in order typed in by the shop may carry the number you called from, which the shop keeps to ring you back.

Your orders across shops

The "My orders" page shows your orders from every Ordro shop in one place. Only you can see it, and only after we confirm your phone with a code sent to your WhatsApp.

WhatsApp messages

Messages between you and a shop go through WhatsApp (Meta Platforms). We keep a log of the messages Ordro itself sends and receives on the shop's behalf — order confirmations, status updates, greetings, the shop's replies in its Ordro inbox — so the shop can see what was sent. Conversations you have directly with a shop in their own WhatsApp app are between you and them.

Live delivery tracking

While a delivery is on its way, the order page shows you where the rider is and an estimated arrival time. To work out the time by road, the rider's position and your delivery pin are sent to Google's Distance Matrix service; the map itself is drawn with OpenStreetMap data served by OpenFreeMap, whose servers receive your browser's requests for map tiles. Nothing about you is stored by either beyond their ordinary server logs.

Shop staff

To run a shop on Ordro, an owner creates an account and can invite staff. For each account we store a name, a phone number and, if given, an email address, plus a password or the one-time codes we send to sign in. In the app we store a device token so new-order alerts can reach the phone; those alerts are delivered through Expo's push notification service, which sees the token and the alert text (an order number and total, never a customer's name or number). A shop's product catalogue, photos, settings and the orders it receives are the shop's own business records.

Photos a shop uploads can be improved or redrawn by an AI image service on Microsoft Azure, and a photographed paper menu can be read into product rows the same way. Only the product photo or menu goes there, never customer data.

Riders

When a rider marks an order as out for delivery in the app, the app shares the phone's position with the customer of that order, also while the app is in the background, so the customer can watch the delivery come. The position is sent about every ten seconds, is kept for only five minutes at a time, and is never written to a history. Sharing starts only when the rider sends an order out, shows a persistent notice on the phone while it runs, and stops by itself when the last order is marked delivered (or when the rider turns location off for Ordro). The shop's managers can see the rider's latest position while a delivery is out. The one thing kept is the spot where an order was marked delivered, on that order, as proof of delivery.

Who else handles data

• Meta Platforms — WhatsApp messages between customers and shops are carried by the WhatsApp Business Platform.
• Microsoft Azure — our servers and database (United Arab Emirates region) and the storage for product photos.
• Stripe and Razorpay — when a shop takes online payments, you pay the provider directly; we never see or store a card number, only that the payment succeeded and its reference.
• Courier services (for example Shiprocket) — when a shop sends an order by courier, the delivery name, phone and address go to the courier.
• Google — the Distance Matrix service, for the delivery time estimate described above.
• OpenFreeMap — map tiles for the delivery map.
• Expo — push notifications to the merchant app.
• Sentry — error reports from our servers, which contain the page or action that failed, never sign-in or order links.

None of them may use this data for anything but the service they provide to us.

How long we keep things

Orders are kept for as long as the shop has an account with us, since shops need their own records. Message logs are kept for 12 months. Sign-in sessions expire after 90 days without use. A rider's position is kept for five minutes. A closed account is removed within 30 days, except where we must keep records for tax or legal reasons.

Your choices

To stop Ordro messaging you, reply STOP to any message, or ask the shop. Shop staff can delete their account from the app's Account tab; a shop owned by one person goes offline at once and its data is deleted within 30 days. For anything else — a copy of your data, a correction, or removal — email privacy@ordro.in from the number or address on the account. We confirm within 30 days.

Children

Ordro is not directed at children under 16 and we do not knowingly keep data about them.

Changes

When this policy changes, the date above changes with it, and a material change is announced to shops in the portal.