Privacy Policy
Effective 26 October 2026
OrderSmart (“OrderSmart”, “we”, “us”) provides a mobile and web application that lets local businesses manage memberships, orders, and payments, and talk to their customers over WhatsApp. This policy explains what information we collect through the OrderSmart app and website (ordersmart.in), how we use it, and who we share it with.
Information we collect
Account information
When you sign up, we collect your mobile number and verify it with a one-time password (OTP). We don't require an email address to create an account.
Business information
If you register a business on OrderSmart, we collect the business name, category, address, and (optionally) GST registration details, to run the business profile and generate invoices.
Member and customer information
Business owners and staff may add their own customers' or members' names and phone numbers to manage subscriptions and orders. This information is entered and controlled by the business, and OrderSmart processes it on the business's behalf to provide the service.
Orders, payments, and invoices
We store order details, payment status, and GST invoices generated for each order or membership renewal. Payments are processed by Razorpay; OrderSmart does not store your card, UPI, or bank credentials — only the resulting payment status and amount.
Messages sent over WhatsApp
To notify customers about orders, payment confirmations, and renewal reminders, OrderSmart sends messages through Meta's WhatsApp Business Platform. This requires sharing the recipient's phone number and the message content with Meta solely to deliver that message. We keep a log of messages sent, for support and troubleshooting.
Website analytics
On the public pages of ordersmart.in (not inside the app) we use Google Analytics to understand how visitors find and use the site — pages viewed, approximate location, device type. It sets cookies for that purpose. We don't use it for advertising, and we honour the browser's “Do Not Track” setting by not loading it at all.
Device and push notification data
If you enable notifications, we store a device token (via Firebase Cloud Messaging) to deliver order and renewal alerts to your phone.
How we use this information
- To create and secure your account, and verify your identity via OTP.
- To operate the features you use — orders, memberships, invoicing, and reports.
- To send transactional messages over WhatsApp and push notifications (order updates, payment confirmations, renewal reminders).
- To process payments through Razorpay and reconcile them against orders and invoices.
- To provide customer support and investigate issues you report.
- To maintain the security and reliability of the service.
We do not sell your information, and we do not use it for third-party advertising.
Who we share information with
- Meta Platforms, Inc. — to deliver messages you or your business send over WhatsApp.
- Razorpay Software Pvt. Ltd. — to process payments.
- Google (Firebase Cloud Messaging) — to deliver push notifications.
- Google Analytics — anonymous usage statistics for the public website only.
- Google Cloud Platform / MongoDB Atlas — our infrastructure and database providers, who store data on our behalf.
Each of these providers processes data only as needed to perform their service for us, under their own privacy and security terms. We don't share your information with anyone else except as required by law.
Data retention
We keep account, business, order, and invoice data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, and tax record-keeping requirements (GST invoices in particular). You can request deletion of your account and associated data at any time — see “Your rights” below.
Data security
We use industry-standard measures — encrypted connections (HTTPS), access controls, and hosting on reputable cloud infrastructure (Google Cloud Platform, MongoDB Atlas) — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data to a high standard.
Your rights
You can access, correct, or request deletion of your personal information, or ask us how your data is used, by contacting us at support@ordersmart.in. If you are a customer or member added to OrderSmart by a business you deal with, please also reach out to that business directly, since they control what information is entered on your behalf.
Delete your data
You can delete your data yourself, without contacting us:
- To delete a business and everything in it (customers, members, orders, payments, invoices, message log): open OrderSmart → Settings → Danger zone → Delete business, and type the business name to confirm. Only the owner can do this. The deletion is immediate.
- To delete your account: delete every business you own as above, then email us from the mobile number on the account (or from an email that identifies it) at the address below with the subject “Delete my account”. We remove your account, phone number, and device tokens within 30 days and confirm by reply.
- If a business you deal with added you as a customer or member, ask that business to remove you; they can do it from your customer record in the app. You can also email us and we will pass the request on.
GST invoices already issued are retained for the period required by Indian tax law even after deletion, with the business's and customer's details limited to what the invoice must carry. Nothing else is kept.
Children's privacy
OrderSmart is intended for business owners, staff, and their adult customers. It is not directed at children, and we do not knowingly collect personal information from anyone under 18.
Changes to this policy
We may update this policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, notify you through the app.
Contact us
Questions about this policy or how your data is handled? Email us at support@ordersmart.in.