Privacy Policy

1. Information We Collect

OrderBOT processes data from both merchants using our console and customer communications sent via WhatsApp. The types of personal data collected include:

• Merchant Account Data: Name, business email, phone number, password hash, and payment credentials for subscription billing.
• API Credentials: Access tokens and webhook keys for Meta Developer accounts, Shopify, WooCommerce, or calendar plugins.
• Customer Transaction Data: Names, phone numbers, delivery addresses, booking details, shopping cart items, and invoice references.
• Conversation Logs: Log transcripts of text, audio notes, and media exchanged between end users and the OrderBOT AI agent.

2. How We Use Collected Data

We process your data strictly to deliver and maintain the OrderBOT services, specifically to:

• Train and configure client-specific AI bots to answer queries, take bookings, and recommend items based on your database catalog.
• Synchronize orders, shipping rates, and stock values with your integrated e-commerce databases.
• Generate custom payment gateway links and confirm payment webhooks in real-time.
• Send automated booking confirmations, status notifications, and retargeting alerts.
• Monitor API health, performance metrics, and prevent fraudulent messaging activity.

3. Security & Data Protection

We implement strict security practices to keep your data secure. All communications between WhatsApp servers, our backend, and your e-commerce platforms are encrypted in transit using TLS 1.3. Merchant database credentials and API keys are stored with advanced encryption at rest. Credit card transactions are processed entirely through secure, PCI-DSS compliant providers (like Stripe or Razorpay)—we never record or store full card details on our servers.

4. Data Sharing & Third-Party Vendors

We do not sell merchant or customer data to third-party advertisers. Data is shared only with Meta Platforms Inc. (to route messages via the official WhatsApp Business Cloud API) and your configured third-party integrations (e.g. payment processors, booking calendar APIs, shipping carriers, or CRM databases). These services process data independently based on their own policies.

5. Data Retention

Conversation logs and customer details are retained in our database only for as long as necessary to process orders and support merchant analytical dashboards. Merchants can configure retention thresholds in their setting panels or request complete deletion of active logs at any time.

6. End-User Data Rights

Under local privacy regulations, end customers have the right to request access to, correction of, or deletion of their personal data processed during conversational sales. End users should direct these requests to the merchant business, which can execute deletions within the OrderBOT Console.