Last updated: September 20, 2026
This Privacy Policy explains how OrderFlow ("OrderFlow", "we", "us", or "our") collects, uses, stores, and protects information when you use the OrderFlow mobile application and related services.
By using OrderFlow, you acknowledge that you have read and understood this Privacy Policy.
Depending on how you use OrderFlow, we may collect information necessary to provide the application's features.
OrderFlow may store information necessary to create and manage orders, assignments, order statuses, and order history. Depending on how your organization uses the application, this may include customer-related information, product information, quantity information when provided, order details, employee assignments, timestamps, and order status history.
OrderFlow may store certain customer information locally on your device to provide customer suggestions when creating orders. This may include customer name, phone number, address, and related locally saved customer information.
Device Customer Memory is stored locally on the device and is separate from the OrderFlow/Supabase database. It may be removed if the user deletes saved customer information, uninstalls the application, resets the device, or clears the application's local data.
OrderFlow uses authentication and authorization mechanisms to protect accounts and application data.
Password-related information is handled using security measures designed to prevent passwords from being stored or transmitted in plain text.
We also use access controls and database security mechanisms to help restrict access to information according to user permissions and organizational access.
OrderFlow uses Supabase and its underlying database and storage infrastructure to store and process application data.
Information stored through OrderFlow may include account information, profile photos, company information, orders, assignments, and related application data.
Profile photos uploaded through OrderFlow may be stored using OrderFlow's configured cloud storage infrastructure.
Device Customer Memory is stored locally on the user's device as described above.
Data is retained for as long as reasonably necessary to provide the application's functionality, maintain records, comply with applicable obligations, resolve disputes, and protect the security of the service.
OrderFlow may use a soft-delete mechanism for user accounts. When an account is deleted, it may be marked as deleted and deactivated rather than immediately being physically removed from the database.
This may be necessary to preserve historical order and audit information, maintain data integrity, and support legitimate business records.
Deleted users may no longer be permitted to access the application.
We do not sell your personal information.
Information may be processed by service providers necessary to operate OrderFlow, such as infrastructure, database, authentication, hosting, storage, analytics, or other technical service providers used by the application.
Information may also be disclosed when reasonably necessary to comply with applicable law, legal processes, enforce our terms, prevent fraud, protect the security of OrderFlow, or protect the rights and safety of users and others.
OrderFlow is designed for organizational use. Depending on the user's role and permissions, authorized members of the same organization may be able to access company, employee, order, assignment, and related information.
Organization administrators are responsible for managing their organization's users and access permissions appropriately.
We use reasonable technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure, or destruction.
However, no electronic storage or transmission method can be guaranteed to be completely secure.
We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing OrderFlow, maintaining historical records, enforcing agreements, resolving disputes, and meeting legal or regulatory requirements.
Depending on applicable law, you may have rights regarding your personal information, including requesting access, correction, or deletion of certain information.
If you want to request access, correction, or deletion of information associated with your OrderFlow account, please contact us using the contact information below or follow the account deletion process provided on our account deletion page.
Some information may need to be retained where required for legitimate business purposes, security, legal obligations, or preservation of historical records.
OrderFlow is intended for business and organizational use and is not directed toward children. We do not knowingly collect personal information from children where prohibited by applicable law.
OrderFlow may use third-party services to provide infrastructure, database, authentication, storage, analytics, or other technical functionality. These services may process information as necessary to provide their respective services and according to their own privacy policies.
We may update this Privacy Policy from time to time to reflect changes to OrderFlow, our practices, or applicable legal requirements.
When changes are made, the updated policy will be published at this location and the "Last updated" date will be changed accordingly.
If you have questions about this Privacy Policy or want to make a privacy-related request, contact us:
OrderFlow
Email: support.orderflow@gmail.com