Privacy Policy

Last updated: July 28, 2026

1. Introduction

Ordare ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our merchant dashboard and consumer mobile application.

2. Information We Collect

Information You Provide

  • Account information: Name, email address, phone number, and password when you create an account. Your mobile phone number is used to create and secure your account – to send account verification codes and two-factor authentication (2FA) codes by text message – and is provided to the merchant fulfilling an order you place so that the merchant can reach you about that order. See SMS and Text Messaging below.
  • Business information: Business name, address, phone, website, and operating hours (for merchants)
  • Payment information: Billing details processed through Stripe (merchants) and payment methods processed through Square (consumers). Ordare does not collect, process, or store credit card information. All cardholder data is entered directly into PCI-compliant payment forms hosted by Square and Stripe, which tokenize and store the card information on their secure, PCI-DSS certified infrastructure. Ordare only receives non-sensitive references (such as tokens, last four digits, card brand, and expiration month/year) for display and transaction purposes.
  • Billing address: For merchants who subscribe to paid products (such as the custom mobile app), we collect a billing name and address (street, city, state, postal code, country) and transmit it to Stripe to associate with your customer record for receipts, invoices, and tax reporting. Ordare does not store the billing address on its own servers; it is read from and written to Stripe directly.
  • Contact form submissions: Name, email, business name, and message content
  • Menu content: Item names, descriptions, prices, and images uploaded by merchants

Information Collected Automatically

  • Device information: Device type, operating system, unique device identifiers, and push notification tokens
  • Location data: With your permission, approximate location for finding nearby restaurants (consumer app only)
  • Usage data: Pages visited, features used, and interaction patterns
  • Order data: Order history, items ordered, transaction amounts, and timestamps

Information from Third Parties

  • Square: Catalog data, transaction information, and location details when merchants connect their Square accounts
  • Clover: Catalog data, order information, and location details when merchants connect their Clover accounts
  • Stripe: Payment processing status and billing information for merchant invoicing

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process orders and payments
  • Send order status notifications and important service updates
  • Send account verification codes and two-factor authentication (2FA) codes by text message
  • Allow the merchant fulfilling your order to contact you about that order
  • Generate invoices and process merchant billing, including recurring subscription charges
  • Send transactional billing emails, such as receipts, payment-failure notices, and subscription status changes
  • Provide customer support and respond to inquiries
  • Analyze usage patterns to improve user experience
  • Detect, prevent, and address fraud and security issues
  • Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share your information with:

  • Square: To process consumer payments made through the Ordare mobile application, and (for Square merchants) to sync orders and customer records – including your name, email address, and phone number – to the merchant's POS
  • Clover: To sync orders to the merchant's POS for Clover merchants, including your name and phone number on the order ticket
  • Stripe: To process merchant billing and invoicing
  • Merchants: Consumer order information is shared with the merchant fulfilling the order (name, order details, and phone number so that the merchant can contact you about that order)
  • Service providers: Third-party services that help us operate the platform (hosting, analytics, email delivery)
  • Legal requirements: When required by law, legal process, or to protect our rights

Mobile Phone Numbers and SMS Consent

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from every information-sharing category described above and are never shared with any third party.

Your mobile phone number is disclosed in only three circumstances:

  • To our SMS delivery provider (Twilio), for the sole purpose of transmitting the account verification and two-factor authentication messages that you request.
  • To the merchant fulfilling an order you place, so that the merchant can contact you about that specific order – for example, if an item is unavailable, a substitution is needed, or there is a problem with your pickup. Merchants receive your number as part of the order they are fulfilling. Our Merchant Terms permit them to use it for that order and nothing else, and expressly forbid them from exporting it, adding it to a marketing or calling list, or disclosing it to anyone. A merchant who violates that restriction has their account terminated.
  • To the merchant's point-of-sale provider (Square or Clover), which receives your number as part of the order and customer record it sends to the merchant's POS. Once there, your number is held in the merchant's own Square or Clover account and is governed by that provider's privacy policy and by the merchant's obligations under our Merchant Terms.

We do not sell, rent, or lease mobile phone numbers, and we do not share them with advertisers, data brokers, or affiliates.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account termination:

  • Account data is retained for up to 12 months for legal and billing purposes
  • Transaction records are retained as required by applicable financial regulations
  • Anonymized usage data may be retained indefinitely for analytics

You may request deletion of your personal data by contacting us.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Tokenized payment card storage through Square and Stripe – Ordare does not store full credit card numbers, CVV codes, or other sensitive cardholder data on its own servers
  • Regular security assessments
  • Access controls and authentication requirements

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your personal information
  • Object to or restrict processing of your information
  • Data portability (receive your data in a structured format)
  • Withdraw consent where processing is based on consent

To exercise these rights, reach out through our contact page.

8. Push Notifications

The consumer mobile app may send push notifications for order status updates and promotional messages. You can manage notification preferences in your device settings at any time.

9. SMS and Text Messaging

Ordare uses text messaging for account security only. We send SMS messages for two purposes: verifying your phone number when you set up an account, and delivering two-factor authentication (2FA) codes when you sign in. We do not send marketing, promotional, or advertising text messages, and we never will.

  • Non-sharing: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party. Your number is passed only to our SMS provider (Twilio) for the sole purpose of delivering the message you requested.
  • Message frequency: Message frequency varies and depends on your activity. Messages are sent only in response to an action you take – you will typically receive one message when you verify your phone number, and one message each time you sign in with two-factor authentication enabled.
  • Cost: Message and data rates may apply. Ordare does not charge for text messages; charges, if any, come from your mobile carrier.
  • Opting out: Reply STOP to any message to stop receiving text messages. You will receive one confirmation message and no further messages after that. Because these messages carry security codes, opting out means you will no longer be able to receive verification or two-factor authentication codes by text and may need to use another authentication method to access your account.
  • Help: Reply HELP to any message for assistance, or reach us through our contact page.
  • Delivery: Mobile carriers are not liable for delayed or undelivered messages.

Contact from merchants. Separately from Ordare's text messaging program, the merchant fulfilling an order you place receives your phone number with that order and may call or text you directly about it – for example, to tell you an item is unavailable or to ask about a substitution. Those calls and messages come from the merchant's own phone or systems, not from Ordare, and are not covered by the STOP and HELP keywords described above. Merchants are prohibited from using your number for marketing. They may not export it, store it in their own systems beyond what that order requires, or share it with anyone, and violating that terminates their Ordare account. To stop hearing from a particular merchant, contact that merchant directly.

10. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and, where appropriate, sending you a notification. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: