Privacy Policy

1. Information We Collect

We collect information necessary to operate your digital storefront and platform subscription:

• Merchant Account Information: Owner full name, business trade name, trade category (e.g., Restaurant, Cafe, Hardware, Grocery), physical store address, mobile phone number, email address, and encrypted password credentials.
• Catalog & Storefront Content: Product names, descriptions, prices, sale prices, inventory stock levels, category structures, brand names, unit measurements, and uploaded product images.
• Order & Queue Records: Customer orders placed on public storefronts or menus, customer contact numbers (for order pickup updates), token queue numbers (S- and M- sequences), and order notes.
• Billing & Subscription Data: Subscription tier selections, payment transaction IDs, Razorpay order and payment IDs, 30-day validity timestamps, and GST tax invoice information.

2. How We Use Your Data

Collected information is used strictly to provide and maintain platform functionality:

• Rendering your public online storefront (`/store/[slug]`) and digital menu (`/menu/[slug]`).
• Managing real-time order notifications, kitchen display tokens, and TV order displays.
• Processing subscription payments and issuing official 30-day tax invoices.
• Enforcing subscription tier limits on product counts and category allowances.
• Providing technical support and troubleshooting operational issues.

3. Third-Party Infrastructure & Payment Partners

We do not sell, rent, or trade your personal or business data. We share necessary operational data only with trusted infrastructure providers:

• Supabase & PostgreSQL: Our cloud database infrastructure is hosted securely via Supabase, employing encrypted connections, authenticated role-based access, and isolated database schemas.
• Razorpay: Platform subscription purchases are processed via Razorpay. When subscribing to Basic (₹20) or Gold (₹99), payment information is transmitted securely to Razorpay using standard PCI-DSS compliant encryption. OrderOne.in does not store your credit card numbers, debit card CVVs, or UPI banking PINs.

4. Data Security & Storage

We implement industry-standard administrative and technical safeguards to protect your data against unauthorized access, disclosure, or alteration:

• Passwords are hashed using industry-standard salted hashing algorithms (bcrypt) prior to storage.
• All data transmitted between your browser and our servers is encrypted using Secure Sockets Layer (SSL / HTTPS).
• Strict multi-tenant database isolation ensures that one merchant cannot view or access another merchant’s administrative dashboard or billing records.

5. Cookies and Browser Storage

OrderOne.in uses essential session cookies and browser local storage solely to keep you signed in, remember your active business selection in the dashboard, and store shopping cart items on customer storefronts. We do not deploy third-party advertising tracking cookies.

6. Data Retention and Merchant Rights

You retain ownership of your business data. Registered business owners may:

• Update or edit product catalogs, prices, and business profiles at any time through the dashboard.
• Export or print order summaries and tax invoices.
• Request full deletion of their merchant account and associated catalog data by contacting our support team at support@orderone.in.

7. Contact & Grievance Officer

If you have questions or concerns regarding our privacy practices, please contact us at: