Privacy Policy

Ordder.io (“Ordder”, “we”) provides an AI order desk that businesses use to answer their own customers’ enquiries and issue quotes and invoices. This policy explains what we collect, why, who else processes it, and how to have it removed.

Ordder.io is a product created and owned by MahiSys (OPC) Private Limited. The data controller referred to as “we” throughout this policy is MahiSys (OPC) Private Limited.

Two kinds of people, two different roles

This distinction governs everything below, so it comes first.

• Our clients — the businesses who sign up for Ordder. For their own account data we are the data controller.
• Our clients’ buyers — the people who message those businesses to ask for a price. For that data we are a data processor, acting on our client’s instructions. The business you messaged is the controller, and a request to see or delete your data is best directed to them; if you contact us we will pass it on and support them in answering it.

What we collect

From clients who sign up

• Business name, owner name, email address and phone number.
• Business address, pincode and GSTIN where provided.
• Documents uploaded for account activation — GST certificate, proof of business, logo.
• Product catalogue, pricing, tax and delivery settings that the client enters or imports.
• Login credentials. Passwords are stored only as a bcrypt hash and are never recoverable, by us or anyone else.

From buyers who message one of our clients

• The contact handle the enquiry arrived on — a WhatsApp phone number, an email address, or the platform-assigned id Meta gives a Messenger or Instagram conversation (never a phone number, real name or profile for those two, unless the buyer types one).
• The name given, if any.
• The content of messages exchanged with that business, including the quotes and invoices produced.
• Delivery location and pincode when the buyer supplies it in order to be quoted.

We do not buy contact data, and we do not build advertising profiles. We do not sell personal data to anyone, in any circumstances.

Why we process it

• To run the service — read an enquiry, work out what is being asked for, price it from the client’s catalogue, send the reply, and raise the invoice.
• To notify the client’s team when a deal needs a person.
• To bill our clients and meter their plan usage.
• To keep the service secure and working — logs, error diagnosis, abuse prevention.

The lawful basis for client data is performance of our contract with them. For buyer data we act on our client’s instructions, under their lawful basis for corresponding with their own customers.

Automated processing by AI

This is worth stating plainly. The content of a buyer’s enquiry is sent to Anthropic (the Claude API) so the system can work out the product, quantity, unit and delivery being requested, and decide whether it can answer or should hand the conversation to a human.

Prices are not generated by the AI. They are read from the client’s own catalogue and calculated arithmetically. Anthropic processes the message to produce that reading and does not use it to train their models.

No decision with a legal or similarly significant effect is made about a buyer by automated means. A quote is a commercial offer the buyer is free to ignore, and any conversation the system is unsure about is passed to a person at the client’s business.

Who else processes the data

We use the following sub-processors. Each receives only what it needs to perform its function.

• Google Cloud Platform — hosting and database, in the asia-south1 (Mumbai) region. Client and buyer data is stored here.
• Meta Platforms — delivery of WhatsApp, Messenger and Instagram messages to and from buyers, where the client uses one of those channels. For Messenger and Instagram this includes the buyer’s platform-assigned id (never their name or profile unless they give it in the conversation) and the message content itself.
• Anthropic — AI understanding of enquiry text, as described above.
• ZeptoMail (Zoho Corporation) — sending email, including replies to buyers who enquired by email.
• Razorpay — subscription billing for our clients. Card details go directly to Razorpay; we never see or store them.
• Zoho Books — only where a client chooses to connect their own accounting software, and then only the invoices they ask us to sync.

Where data is stored

Primary storage is in India (Google Cloud asia-south1, Mumbai). Some sub-processors above operate globally and may process data outside India in the course of delivering a message or an API response.

How data is protected

• Tenant isolation is enforced by the database, not merely by application code. Every client’s rows are protected by PostgreSQL row-level security, and the application connects with a role that cannot bypass it.
• Third-party credentials are encrypted at rest with AES-256-GCM — a client’s WhatsApp, Facebook Page and Zoho tokens are ciphertext in the database, and the key is held separately in Google Secret Manager.
• All traffic is encrypted in transit over TLS.
• Passwords are stored only as bcrypt hashes.

How long we keep it

• While the account is open — enquiries, quotes and invoices are kept as the client’s business record. Indian tax law requires invoice records to be retained, so a client may be obliged to keep them for a statutory period.
• After an account closes — we delete the account and its data within 90 days of a deletion request, except anything we must retain by law.
• Deleting a client deletes their buyers. Buyer records exist only inside the client account they belong to and are removed with it.

Consent, and taking it back

We ask for your agreement before we process anything, at the point of signup, and we record what you agreed to and which version of this notice you saw. The version in force is 2026-09-14. You can see your own record at any time in Settings → Privacy & data.

• Running your order desk — required to have an account. Taking this back means closing the account, which you can do yourself from the same screen.
• Product updates by email — entirely optional, asked separately, and switched off in one click in Settings whenever you like. Turning it off changes nothing else about your account.

We only ask for the data a stated purpose actually needs, and we do not use your account data for anything you have not agreed to.

Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, and to object to processing. If you are in India, the Digital Personal Data Protection Act, 2023 gives you these rights over the data we hold about you as our client, along with the right to nominate someone to exercise them on your behalf if you die or become incapacitated.

• If you are a client, export or request deletion of your account directly from Settings → Privacy & data — no email needed. A deletion request is reviewed and actioned by our team; invoices we are legally required to retain are kept separately even after the rest of the account is removed. You can also write to privacy@ordder.io and we will act within 30 days.
• If you are a buyer who messaged a business using Ordder, the business is the controller of that conversation — contact them first. You can also write to us and we will identify the business and pass your request on.

If we get it wrong

Write to privacy@ordder.io first — it reaches the person responsible for privacy at MahiSys (OPC) Private Limited, and we answer within 30 days. If you are in India and we have not resolved it, you may complain to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

This notice is published in English. Write to us if you would like it in Hindi or another language listed in the Eighth Schedule to the Constitution and we will provide one.

Children

Ordder is a business-to-business tool and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes

We will update this page when our processing changes, and change the date at the top. Material changes affecting clients will be notified by email.

Contact

MahiSys (OPC) Private Limited, operator of Ordder.io.
Privacy enquiries: privacy@ordder.io
Data deletion requests: privacy@ordder.io