Privacy Policy

Information you provide directly:

• Name, email address, and phone number when you sign up or contact us
• Restaurant or business name, address, and details
• Menu images, logos, and other files you upload to our platform
• Payment information (processed securely by our payment providers — we do not store card numbers)
• Communications you send us via email, contact forms, or support channels

Information collected automatically:

• IP address, browser type, and operating system
• Pages visited, time spent, and referring URLs
• Device identifiers and usage patterns
• Cookies and similar tracking technologies (see Section 8)

Information from third parties:

• Payment processors (e.g. Stripe) may share transaction data with us
• Analytics providers may share aggregated usage data

We use the information we collect to:

• Set up, operate, and maintain your OrderXO store
• Process and fulfill orders placed through your store
• Contact you to confirm your signup, provide support, and communicate account updates
• Send you service-related notifications (e.g. new orders, payment confirmations)
• Send you marketing communications, if you opt in (you can opt out at any time)
• Improve and personalize our platform and services
• Detect, investigate, and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information to third parties. We do not allow advertisers to target you based on your personal data.

We may share your information with:

• Service providers — third-party vendors who help us operate the platform (e.g. cloud hosting, file storage, email delivery, payment processing). These providers are contractually obligated to protect your data and may only use it to provide services to us.
• Your customers — when a customer places an order through your store, we share the order details (name, contact, order items) with you as the store owner.
• Legal authorities — if required by law, court order, or to protect the safety of our users or the public.
• Business transfers — if OrderXO is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you before this happens.

We do not share your personal information with advertisers or data brokers.

Your data is stored on servers located in the United States. We use industry-standard security measures including encryption in transit (TLS/SSL), encrypted storage, and access controls to protect your information.

File uploads (logos, menu images) are stored securely via Uploadthing and hosted on a content delivery network (CDN). MongoDB Atlas is used for structured data storage with encryption at rest.

While we take reasonable steps to protect your data, no system is 100% secure. If you believe your account has been compromised, contact us immediately at hello@orderxo.com.

We retain your personal information for as long as your account is active or as needed to provide you services. If you close your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it by law (e.g. financial records for tax purposes, which we retain for 7 years).

You may request deletion of your data at any time by contacting us at hello@orderxo.com.

Depending on where you live, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data
• Portability — request your data in a machine-readable format
• Opt-out of marketing — unsubscribe from marketing emails at any time using the link in any email we send
• Restriction — request that we limit how we process your data in certain circumstances

To exercise any of these rights, email us at hello@orderxo.com. We will respond within 30 days.

We use cookies and similar technologies to operate our platform, remember your preferences, and understand how you use our service. Types of cookies we use:

• Essential cookies — required for the platform to function (e.g. session authentication)
• Analytics cookies — help us understand usage patterns so we can improve the product
• Preference cookies — remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the platform.

OrderXO is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at hello@orderxo.com and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you by email or via a notice on our platform. Your continued use of OrderXO after changes become effective constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, contact us: