Privacy Policy
Orderly operates this service for connected businesses. The business you message controls its menu, customer relationships and use of your order information; Orderly processes that information to provide the service. Orderly manages its own account, support and security records. Our public contact is waytogalaxy999@gmail.com.
Effective 16 September 2026
Information we process
We may process account and business details, WhatsApp identifiers and message content, menu and order information, integration settings, and technical logs needed to operate and secure the service.
How information is used
Information is used to authenticate users, connect approved business services, deliver and automate messages, create and manage orders, troubleshoot failures, prevent abuse, and improve reliability.
Service providers
Cloudflare hosts the website. Supabase provides authentication, the database and backend functions. Meta delivers WhatsApp messages. The business’s chosen AI provider (OpenAI, Google Gemini or Anthropic) receives message content and relevant business context to interpret requests. Google receives order data when Sheets is connected. If staff enable email alerts and the mail service is configured, Resend receives the verified staff email and a generic operational notice without customer details. Providers may process data outside Pakistan under their own terms. The business must review its provider’s tier and data-use settings before enabling AI. Orderly does not sell personal information or use customer chats to train its own models.
Retention and security
There is no automatic customer-data expiry enabled by default. Owners can preview and enable automatic cleanup in Security & privacy for records inactive for 30-3650 days. A changed policy has a 24-hour grace period. Cleanup runs in bounded batches and protects unfinished orders, human handoffs and outstanding jobs; busy workspaces are skipped. Businesses should choose a period appropriate to their recordkeeping obligations. Authorized owners can export and delete a customer’s conversations and orders from the active database after pausing processing. Anonymous usage accounting and administrative audit events are retained for billing and security. Copies in Google Sheets, WhatsApp, AI providers, downloaded exports and backups have separate retention and must be handled separately. Deleted data may remain in provider backups until their expiry. Access is restricted by business membership, API credentials are encrypted at rest, and traffic uses HTTPS.
Your choices
A connected business can pause automation, disconnect integrations, or request deletion of its workspace data. Customers may contact the business they messaged to exercise applicable privacy rights.
Contact
Contact Orderly at waytogalaxy999@gmail.com for privacy questions, access, correction or deletion requests. Include the business name and relevant account or phone number. You may also contact the restaurant directly. We verify identity and authorization before acting, and explain any applicable retention restriction. Do not send passwords or access tokens.