Who we are
OrderNest is operated by IBEE Solutions Pvt Ltd, a company registered in India with its office in Hyderabad, Telangana. For the purposes of applicable data protection law, including the Digital Personal Data Protection Act, 2023, we are the data fiduciary for the personal data of our customers and website visitors. For the personal data of our customers' own customers and staff that is processed inside the Services, our customer is the data fiduciary and we act on their instructions as a processor.
Information we collect
Account and contact details: name, business name, phone number, email address, GSTIN and billing address when you request a demo, sign up or pay.
Operational data you enter or generate in the Services: menu, orders, bills, stock, purchases, supplier details, journal entries, attendance and payroll records, customer lists and campaign history. This includes personal data about your staff and your customers, which you control.
Device and usage data: device type, operating system, app version, IP address, pages and features used, crash reports and performance logs.
Communications: messages you send us on WhatsApp, email or through the portal, and support call notes.
Cookies and similar technologies on ordernest.com for session management, preferences and aggregate analytics. You can disable cookies in your browser; parts of the website may then not work.
How we use it
To provide, operate and support the Services, including billing, printing, inventory, books, payroll and agent features you have enabled.
To run the AI agents you turn on. Agents read your operational data to produce briefings, variance alerts, suggestions and draft actions. They act only within the permissions you set and every action is recorded in your audit log.
To send service messages: day-close summaries, alerts, invoices, security notices and changes to these terms.
To improve the Services, using aggregated and de-identified usage data.
To comply with law, including tax, accounting and lawful requests from authorities.
We do not sell personal data. We do not use your operational data to train models that are shared with other customers.
Storage and transfers
Customer data is stored on cloud infrastructure located in India. Some service providers, such as email or analytics vendors, may process limited data outside India. Where that happens we require contractual safeguards consistent with Indian law.
Security
We use encryption in transit and at rest, role-based access with per-store permissions, signed webhooks for integrations, encrypted storage of integration secrets, logging and regular backups. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you and, where required, the Data Protection Board of India, without undue delay.
Retention
We keep account data for as long as your subscription is active and for up to 8 years afterwards where accounting and tax law requires it. Operational data is retained while your subscription is active and for 180 days after termination, during which you can export it. After that it is deleted or irreversibly anonymised, except where a longer period is required by law or a dispute is pending.
Your rights
You may ask to access, correct or update your personal data, ask for it to be erased where we no longer need it, withdraw consent where processing is based on consent, and nominate a person to exercise these rights on your behalf. Most account details can be changed in the portal. For anything else, write to [email protected]. We respond within 30 days. If you are unhappy with our response you may complain to the Data Protection Board of India.
Children
The Services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.
Third-party links
Our website and apps may link to third-party sites and services. Their privacy practices are their own; this policy does not cover them.
Changes
We may update this policy. Material changes will be announced in the portal or by email at least 15 days before they take effect. The date at the top shows the latest revision.
Grievance officer
Grievance Officer, IBEE Solutions Pvt Ltd, Hyderabad, Telangana, India. Email: [email protected]. (Name and postal address to be added before launch, as required under the Information Technology Act, 2000 and the DPDP Act, 2023.)
Contact
IBEE Solutions Pvt Ltd · Hyderabad, Telangana, India · [email protected] · [email protected]
Governing law
This policy is governed by the laws of India. Courts in Hyderabad, Telangana have exclusive jurisdiction, subject to any mandatory rights you have under applicable law.