Privacy Policy

Last updated: April 2026

1. Information We Collect

Account Information: Business name, owner name, email address, phone number, city, and address when you create an account.

Order Data: Customer names, phone numbers, shipping addresses, order items, and payment methods that you enter into the platform.

Integration Data: Shopify store URLs, API keys, courier credentials, and WhatsApp numbers that you connect.

Usage Data: Pages visited, features used, and interactions with the platform for improving our Service.

2. How We Use Your Information

We use your information to: provide the OrderFlow Service, process and manage orders, send WhatsApp confirmations to your customers, clean and validate shipping addresses using AI, generate shipping labels, provide analytics and reports, communicate important updates, and improve our Service.

3. Data Sharing

We share data only with: courier services (Leopards, TCS, Trax) for shipment booking, WhatsApp/Twilio for message delivery, Shopify for order synchronization, Google Gemini AI for address cleaning (anonymized), and Supabase for secure data storage. We never sell your data to third parties.

4. Data Security

We use industry-standard security measures: encrypted data transmission (HTTPS/TLS), secure authentication via Supabase Auth, Row Level Security (RLS) on all database tables ensuring sellers can only access their own data, encrypted API keys storage, and HMAC signature verification on all webhooks.

5. Customer Data (Your Buyers)

You are the data controller for your customers' data. OrderFlow acts as a data processor. You are responsible for obtaining consent from your customers for WhatsApp communications. Customer data is stored securely and isolated per seller account.

6. Data Retention

Active account data is retained as long as your account is active. After account deletion, data is permanently removed within 30 days. Order history may be retained for legal/tax compliance purposes for up to 7 years.

7. Your Rights

You have the right to: access your data, correct inaccurate data, delete your account and data, export your data, and withdraw consent for communications. To exercise these rights, contact us at support@orderflow.pk.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies. Third-party services may set their own cookies as per their policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions: Email: support@orderflow.pk | WhatsApp: +92 310 9900467