Introduction
Ordova is software for cafés and restaurants: QR menus, table and pick-up ordering, tabs, payments through the café's own payment account, a kitchen display, staff tools and reports.
Ordova is operated by WaslChat (Proprietor: Shaik Jafurulla), Andhra Pradesh, India ("WaslChat", "we", "us" or "our"). This policy covers the Ordova website, dashboard, guest menus, APIs and related services (the "Service"). It applies to our business customers and their staff ("Customers") and to the people who order through a Customer's menu ("Guests").
Information we collect
We collect the following information to provide the Service:
- Account information. The owner's name, email address and password (stored only as a one-way hash), the business name, branches and settings.
- Staff information. Staff names, roles and sign-in PINs, and which devices are signed in. PINs are stored encrypted so the owner can view them.
- Menu and business content. Menu items, prices, photos, tables, and menu photos or PDFs uploaded for import.
- Guest orders. What a Guest orders, the table or pick-up number, notes, the time, and the order and payment status.
- Guest contact details. A name and mobile number when the Guest gives them, a WhatsApp verification of that number, the Guest's language, whether they agreed to receive offers, and any feedback or rating they leave.
- Payment information. Payment amounts, status and references from the Customer's payment provider. Card details are entered on the provider's page and never reach Ordova. The Customer's payment provider keys are stored encrypted.
- Notifications. If a Guest or staff member allows alerts, the browser's notification subscription.
- Newsletter. If you subscribe to Ordova news on our website, your email address, language and the date you joined. We use it only to send Ordova news, and you can unsubscribe at any time by using the link in any email or by emailing us.
- Usage and technical data. IP address, device and browser information, logs, and security events such as sign-ins and PIN views, used to run and protect the Service.
- Billing data. The Customer's plan and subscription status. Subscription payments and card details are handled by Dodo Payments and are not stored by WaslChat.
How we use information
We use the information we collect to:
- Show menus, take orders and send them to the right screens;
- Run tabs, split bills and record payments confirmed by the Customer's payment provider;
- Provide staff sign-in, roles, shifts and reports;
- Send order updates and, only where the Guest agreed, offers from the Customer;
- Power AI features the Customer chooses to use;
- Process subscriptions and billing;
- Provide support and respond to requests;
- Monitor, secure, troubleshoot and improve the Service; and
- Comply with legal obligations and enforce our Terms.
Guest data belongs to the café
Each Customer decides how it uses its Guests' information and is the controller of that data. WaslChat processes it on the Customer's behalf, only to provide the Service. Customers may only send marketing to Guests who agreed to receive it.
We do not sell personal data, and we do not use Guest data for our own advertising.
Data retention and deletion
We keep personal data for as long as the Customer's account exists and as needed to provide the Service, comply with legal obligations, resolve disputes and enforce our agreements. When a trial or plan ends, the account and its data are kept so the Customer can return. We delete or anonymise data within a reasonable period after an account is closed, unless the law requires us to keep it longer.
Customers can ask us to delete their account and data by emailing [email protected]. Guests can ask the café, or contact us and we will help the café respond. We act on verified deletion requests within a reasonable time, subject to legal retention requirements.
Data security
We use industry-standard safeguards, including encryption in transit (TLS/HTTPS), one-way hashing of passwords, encryption of payment keys and staff PINs (AES-256-GCM), role-based access for staff, separation of each café's data, and restricted, logged access to production systems. Ordova never handles card numbers. No method of transmission or storage is completely secure, but we work to protect personal data and keep improving our security.
Your rights
Subject to applicable law, you may have the right to access, correct, update or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. Where WaslChat processes data on behalf of a café (as a processor), Guests should send requests to that café, and we will help the café respond.
International data transfers
WaslChat is operated from India. Ordova's data is stored on servers run by our hosting provider and may be processed in India and other regions where we or our providers operate, including outside the country where you live. Where data crosses borders, we take steps to keep it protected in line with this policy and applicable law.
Children's privacy
Ordova accounts are for businesses and adults aged 18 or over. Guests do not need to give a name or phone number to view a menu, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us so we can delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, give additional notice. Your continued use of the Service after changes take effect means you accept the updated policy.
Contact us
If you have questions about this Privacy Policy or our data practices, contact us:
WaslChat (Proprietor: Shaik Jafurulla), Andhra Pradesh, India
Email: [email protected]