Legal
Privacy policy
How Ordrio collects, uses, stores and protects information when you use our panels, storefronts, apps and APIs. Questions go to support@ordrio.com.
1. Introduction
Ordrio Technologies Pvt Ltd ("Ordrio", "we", "us", or "our") operates a suite of commerce, delivery, billing, customer engagement, logistics, and business management platforms and services. This Privacy Policy explains how we collect, use, process, store, disclose, and protect information when you access or use our merchant/admin panels, customer storefronts, mobile applications, delivery/rider applications, APIs, integrations, hosted subdomains, and any related Ordrio-operated services (collectively, the "Platform"). By using the Platform, you agree to this Privacy Policy.
2. Scope of This Policy
This Privacy Policy applies to merchants and business clients, customers using merchant storefronts, delivery partners and riders, staff users, website visitors, support users, and other individuals interacting with the Platform. This Policy applies across all Ordrio products and services including Nadi, Kadal, Vayu, Doni, Ale, and related integrations or future products.
3. Information We Collect
Account & Identity Information: name, email address, mobile number, password hashes, authentication credentials, business/store information, tax information, billing details, branch information, and support communications.
Customer & Transaction Information: orders, invoices, payment status, transaction history, subscriptions, wallet balances, loyalty activity, delivery addresses, customer notes, order preferences, and refund activity.
Device & Usage Information: IP address, browser type, operating system, device identifiers, app version, access timestamps, usage activity, crash logs, diagnostic data, and performance metrics.
Location Information: delivery tracking, rider location, store location, branch location, or approximate GPS data where required for operational functionality.
Cookies & Tracking Technologies: We use cookies and similar technologies for authentication, analytics, session management, fraud prevention, performance optimization, and personalization. You may disable cookies through your browser settings, though certain features may not function properly.
4. How We Use Information
We use collected information to operate and maintain the Platform, authenticate users, process orders and payments, manage subscriptions and billing, provide customer support, deliver notifications, facilitate deliveries and logistics, improve Platform performance, generate analytics and reports, prevent fraud and abuse, enforce policies and legal obligations, monitor operational health and security, and develop new features and services.
5. Merchant-Controlled Data
Merchants using Ordrio may independently collect and manage customer information through their storefronts. In such cases, the Merchant acts as the data controller for their customer data, and Ordrio acts as a platform and service provider facilitating processing on behalf of the Merchant. Merchants are responsible for obtaining necessary customer consents, complying with applicable laws, and managing their own customer privacy obligations.
6. Payments & Financial Data
Payments may be processed through third-party payment providers. Ordrio does not store complete payment card information on its servers unless explicitly stated otherwise by the payment provider integration. Payment gateways, banking providers, and financial institutions may independently process your information according to their own policies.
7. Communications & Notifications
We may send transactional notifications, order updates, OTPs, billing alerts, delivery notifications, service announcements, support responses, security alerts, and promotional communications via email, SMS, WhatsApp, push notifications, in-app alerts, or phone calls. You may opt out of promotional communications where applicable, though operational and transactional communications may still be required.
8. Third-Party Services & Integrations
The Platform may integrate with third-party providers including payment gateways, logistics providers, analytics providers, social login providers, notification providers, cloud hosting vendors, POS systems, marketing systems, and external APIs. These third parties may independently process information according to their own privacy policies and practices. Ordrio is not responsible for third-party privacy practices.
9. Data Retention
We retain information for as long as reasonably necessary to provide services, maintain operational integrity, comply with legal obligations, resolve disputes, enforce agreements, support audits, and maintain backups. Certain information may continue to be retained even after account closure where legally required, operationally necessary, or required for fraud prevention, accounting, taxation, or security purposes.
10. Account Inactivity
Accounts inactive for six (6) months may be blocked. Accounts inactive for one (1) year may be permanently deleted. We may send advance notice before blocking or deleting inactive accounts where contact information is available.
11. Data Security
We implement commercially reasonable administrative, technical, and organizational safeguards to protect information, including encryption, access controls, authentication systems, and cloud infrastructure security. However, no method of electronic transmission or storage can guarantee absolute security.
12. Backups & Data Responsibility
We maintain our own backups for operational continuity. However, Clients are responsible for maintaining their own copies of critical business data. Ordrio does not guarantee recovery of data lost due to user actions, system failures, or force majeure events.
13. Data Export
You may request a copy of your data by contacting support@ordrio.com. We will provide data exports in commonly used formats upon request, subject to verification of your identity and authorization.
14. International Data Transfers
Your information may be processed, transferred, or stored in jurisdictions outside your state or country, including cloud infrastructure regions used by Ordrio or its providers. By using the Platform, you consent to such transfers where permitted by applicable law.
15. Your Rights & Choices
Depending on applicable laws, you may have rights to access information, update information, request correction, request deletion, object to processing, or withdraw consent. Certain requests may be limited where retention is legally required, operational integrity must be maintained, fraud prevention is necessary, or contractual obligations apply.
16. Account Deletion
You may request account deletion by using available account controls, contacting the relevant Merchant, or contacting Ordrio support. Deletion requests may not immediately remove transactional records, invoices, logs, backups, or legally required records. Certain operational or historical records may be retained in archived or anonymized form.
17. Children’s Privacy
The Platform is not intended for individuals below the age permitted by applicable law without appropriate parental or guardian consent. We do not knowingly collect personal information from children in violation of applicable laws.
18. Analytics & Platform Monitoring
We may use analytics and monitoring systems to understand platform usage, improve stability, analyze performance, detect abuse, and optimize services. This may include aggregated usage analytics, crash reporting, and anonymized performance metrics.
19. Advertising, Analytics & Cookies on ordrio.com
This section explains, in plain language, the advertising and analytics tools on our website ordrio.com: what each one does, the cookies or identifiers it sets in your browser, and how to turn it off. We set it out for all visitors, and in particular to meet the Australian Privacy Act 1988 and the Australian Privacy Principles for visitors in Australia.
Most of these tools are loaded through Google Tag Manager, which itself does not collect personal information; it only loads the tools listed below. Cookie names and lifetimes are the providers’ defaults and may change when a provider updates its tool.
- Google Ads conversion tracking. Tells us when a visit that started from a Google ad leads to a sign-up, a demo request or a WhatsApp or call click, so we can measure and improve our ads. Cookies:
_gcl_auand_gcl_aw(the ad click id), kept for about 90 days. Google may also use its own cookies on Google domains. - Google Analytics 4. Counts visits and shows which pages are used, how visitors arrive and which features they use, in aggregate. Cookies:
_gaand_ga_<id>, kept for up to 2 years. - Meta (Facebook) pixel. Tells us when a visit that started from a Facebook or Instagram ad leads to a sign-up or a demo request, and lets us show our ads to people who visited our website. Cookies:
_fbp(a browser id) and_fbc(the ad click id), kept for about 90 days. - OpenAI conversion tracking. Tells us when a visit that started from an ad on ChatGPT leads to a sign-up or a demo request. OpenAI’s tag may store its own identifier in your browser to connect the visit to the ad click.
- Microsoft Advertising (UET). Tells us when a visit that started from a Microsoft (Bing) ad leads to a sign-up or a demo request. Cookies:
_uetsidand_uetvid, kept for up to 13 months. - Microsoft Clarity. Records how pages are used (clicks, scrolling and page layout) as session replays and heatmaps, so we can fix confusing pages. Clarity masks what you type into form fields by default. Cookies:
_clckand_clsk, kept for up to 1 year. - Zoho SalesIQ. The live chat on our website. It sets cookies to keep your chat conversation and to show the chat to you again on later pages.
- Ordrio’s own cookies.
ordrio_regionremembers the region you picked (India, GCC, Australia and so on) for 1 year.ordrio_attrkeeps, for 90 days, the ad details you arrived with (the ad click id such asgclidorfbclid, theutm_campaign tags and the first page you saw). When you click Sign up for free, these details are passed to the Ordrio sign-up page so we know which ad or campaign brought you.
How to opt out. You can block or delete cookies at any time in your browser settings, and most browsers can block third-party or tracking cookies. You can also:
- turn off personalised Google ads at My Ad Center (Google Ads Settings), and stop Google Analytics with the Google Analytics opt-out browser add-on;
- change how Meta uses your activity for ads in Meta ad preferences;
- turn off personalised Microsoft ads in Microsoft ad settings.
Blocking these tools does not stop you using the website, the chat or the sign-up. For any question about these tools, or to ask for access to or correction of information about you, contact us at the email address in section 21.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updated versions become effective upon publication on the Platform. Continued use of the Platform after updates constitutes acceptance of the revised Privacy Policy.
21. Contact Information
Ordrio Technologies Pvt Ltd
4-1-25C, Prithvi Soudha, Ambalpady Junction
Udupi, Karnataka, 576101, India
Australian office:
Suite 1022 / 401 Docklands Drive
Docklands VIC 3008, Australia
Jurisdiction: Karnataka, India
Website: https://ordrio.com
Email: support@ordrio.com
For privacy-related questions, data access requests, deletion requests, or other concerns, please contact us at the above email address.