Privacy Policy

1. Introduction

Welcome to OrdersFlow. This Privacy Policy explains how OrdersFlow (referred to as "we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you use our e-commerce order management platform, website, mobile application, and related services (collectively, the "Service").

OrdersFlow is an order management platform designed for e-commerce merchants, providing tools for order tracking, shipping integration, employee management, customer communication, and business analytics. By accessing or using our Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect the following categories of information:

2.1 Account and Registration Information

• Full name and business name
• Email address and phone number
• Business address and location
• Password and authentication credentials
• Subscription plan and billing details

2.2 Order and Business Data

• Order details including customer names, addresses, phone numbers, and order contents
• Shipping information and tracking data from integrated carriers (e.g., Mylerz, Bosta, and other Egyptian and regional shipping providers)
• Product and inventory information
• Customer blacklist data contributed to or accessed through the shared merchant blacklist feature
• Employee and staff data, including performance metrics for Call Center, Shipping, and Preparation Staff roles

2.3 Communication Data

• WhatsApp messages sent through our platform via the Meta Cloud API integration
• Message templates, bulk messaging logs, and delivery reports
• Customer interaction records and communication history

2.4 Technical and Usage Data

• Device type, operating system, browser type, and version
• IP address and approximate geographic location
• Usage patterns, feature interactions, and session duration
• Push notification tokens and preferences
• Error logs and crash reports

2.5 Integration Data

• Data synced from connected e-commerce platforms (e.g., Shopify, EasyOrders)
• Shipping provider API data and credentials
• Any third-party service credentials you provide for integrations

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and maintaining the Service, including order management, shipping coordination, and Kanban board functionality
• Processing subscriptions, payments, and invoicing
• Enabling WhatsApp communication features, including bulk messaging and automated notifications
• Operating the shared merchant blacklist to protect merchants from fraudulent customers
• Generating employee performance reports and business analytics
• Sending service-related notifications, updates, and alerts via push notifications, email, or SMS
• Improving, personalizing, and optimizing the Service
• Providing customer support and responding to inquiries
• Detecting, preventing, and addressing fraud, abuse, and security issues
• Complying with legal obligations and regulatory requirements

4. How We Share Your Information

We do not sell your personal information. We may share your data in the following circumstances:

4.1 Shared Blacklist

If you contribute to or access the shared merchant blacklist feature, certain customer data (such as phone numbers and order history flags) may be visible to other verified merchants on the platform. This feature is designed to protect the merchant community from repeat fraudulent orders.

4.2 Shipping Providers

Order and customer data necessary for shipment fulfillment is shared with integrated shipping carriers such as Mylerz, Bosta, and other logistics partners.

4.3 WhatsApp / Meta

When you use our WhatsApp messaging features, message content and recipient information are processed through the Meta Cloud API in accordance with Meta's platform policies and terms of service.

4.4 E-Commerce Platform Integrations

Data is exchanged with connected platforms (e.g., Shopify, EasyOrders) as required to synchronize orders and inventory.

4.5 Service Providers

We use third-party infrastructure providers (such as Supabase for database hosting and Vercel for application hosting) to operate the Service. These providers process data on our behalf under strict contractual obligations.

4.6 Legal Requirements

We may disclose your information if required by applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of OrdersFlow, our users, or the public.

5. Data Storage and Security

Your data is stored on secure cloud infrastructure. We implement industry-standard security measures, including encryption in transit (TLS/SSL), access controls, and regular security reviews, to protect your information from unauthorized access, alteration, or destruction.

While we take reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account termination, we may retain certain data as required by law or for legitimate business purposes such as dispute resolution, fraud prevention, and enforcing our agreements. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics and service improvement.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request a machine-readable copy of your data.
• Objection: Object to the processing of your data for certain purposes.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details provided in Section 12 below. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

Our Service may use cookies, local storage, and similar technologies to maintain your session, remember your preferences, and analyze usage patterns. You can manage cookie settings through your browser; however, disabling cookies may affect certain functionality of the Service.

9. Third-Party Links and Services

Our Service may contain links to third-party websites or services (such as shipping carrier tracking pages or e-commerce platform dashboards). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before sharing any personal information.

10. Children's Privacy

Our Service is intended for use by businesses and individuals who are at least 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Service, by email, or by other appropriate means. The "Last Updated" date at the top of this policy indicates when the latest revision was made. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

OrdersFlow Email: info@ordersflow.site Phone: 01500133327