⚡
Orderr Express

Privacy Policy

Last updated: September 17, 2026

1. Introduction

Orderr Express ("we", "our", "the Platform") is a WhatsApp-native order, payment, and staff operations platform for restaurants. Restaurant owners ("Merchants") connect their WhatsApp Business Account to our Platform via Meta's WhatsApp Embedded Signup, so their customers can place orders, track deliveries, and pay through WhatsApp. This policy explains what data we collect through that connection and through normal use of the Platform, and how we handle it.

2. Data We Collect

When a Merchant connects their WhatsApp Business Account via Facebook Login for Business / Embedded Signup, we collect:

  • Business information: WhatsApp Business Account (WABA) ID, Phone Number ID, business/restaurant name, and admin WhatsApp number.
  • Access credentials: the access token issued by Meta, which we encrypt (AES-256) before storing and use only to send/receive messages on the Merchant's behalf.

Through ongoing use of the Platform, we also collect:

  • Order data: customer WhatsApp number and name, ordered items, delivery address, payment method (Cash on Delivery or Online), and — for online payments — a screenshot of the payment receipt for manual verification by the Merchant.
  • Messages: WhatsApp messages exchanged between customers and the Merchant's bot/staff, to power ordering and support.
  • Delivery tracking: live GPS location of the assigned delivery rider, collected only while an order is out for delivery.
  • Staff accounts: names and WhatsApp numbers of Merchant staff and riders the Merchant creates on the Platform.
  • Technical data: WhatsApp webhook event logs, used to diagnose delivery and integration issues.

3. How We Use Data

  • To create and configure the Merchant's WhatsApp Business Account connection via Embedded Signup.
  • To send and receive WhatsApp messages on the Merchant's behalf (order confirmations, status updates, support replies).
  • To provide order automation, payment-slip verification, and live delivery tracking.
  • To generate the Merchant's own analytics (revenue, order volume, popular items) — this data is never shared across Merchants.
  • To maintain platform security, prevent abuse, and troubleshoot issues.

4. Data Sharing

We do not sell data. We share data only where necessary to operate the Platform:

  • Meta Platforms, Inc. — via the official WhatsApp Cloud API, to deliver messages.
  • Our infrastructure/hosting provider — [e.g. Railway / AWS], for secure storage and running the service.

We do not share data with third-party marketing or analytics services.

5. Data Retention and Deletion

  • Access tokens are stored encrypted and can be revoked at any time from the Merchant's Meta Business Settings.
  • Order and message history is retained for as long as the Merchant's account is active, to support order history and dispute resolution.
  • Merchants or customers may request full data deletion at our Data Deletion page or by emailing us. We delete all associated WABA connections, access tokens, and message/order logs within 7 days of a verified request.
  • To disconnect the integration directly via Meta: Business Settings → Integrations → remove Orderr Express.

6. Your Rights

You can request access to, correction of, or deletion of your data at any time by contacting us using the details below.

7. Contact

  • Email: support@orderrexpress.com
  • Address: [Your Business Address], Pakistan
  • Website: [your-production-domain]

8. Compliance

We comply with Meta's Platform Terms and WhatsApp Business Terms. We only request the permissions approved via Meta App Review for this integration: whatsapp_business_management, whatsapp_business_messaging, and business_management.