Privacy Policy for Ordering Prototype

The operator of Ordering Prototype is:

• Legal business name: Orbits Innovations
• Trading name: Orbits Innovations
• Business address: Republic of Mauritius
• Country: Mauritius
• Email: orbitsinnovations@gmail.com
• Telephone: +230 58355940

For information processed on behalf of a business using Ordering Prototype, that business may also be responsible for determining why and how customer information is processed.

Depending on how the application is used, we may process the following information.

Business account information

When a business administrator connects a Meta or WhatsApp Business account, we may receive:

• Administrator name and account identifiers.
• Business Portfolio identifiers.
• WhatsApp Business Account identifiers.
• WhatsApp phone-number identifiers.
• Business display name and profile information.
• Connected phone-number status.
• Message-template information.
• Permissions granted to Ordering Prototype.

We only access assets that an authorised business administrator explicitly connects or shares with the application.

WhatsApp customer information

When a customer contacts a participating business through WhatsApp, we may process:

• WhatsApp phone number.
• WhatsApp profile name, when supplied by WhatsApp.
• Message text.
• Images, audio, documents or other attachments.
• Interactive message selections.
• Message timestamps.
• Message identifiers.
• Delivery, sent, read and failure statuses.
• Conversation and human-handoff information.

Ordering information

When the ordering functionality is used, we may process:

• Selected products.
• Product quantities and options.
• Order notes.
• Delivery or collection preferences.
• Delivery address, when required.
• Customer contact details.
• Order reference and status.
• Payment method preference.

Ordering Prototype does not currently collect complete payment-card details directly. Payments, when enabled, may be handled by a separate payment provider under that provider's privacy policy.

Technical information

We may collect technical information needed to operate and secure the application, including:

• IP address.
• Browser and device information.
• Application logs.
• Webhook event logs.
• API request and response metadata.
• Authentication and security events.
• Error reports.

Information may be collected:

• Directly from business administrators.
• Directly from customers during WhatsApp conversations.
• Through the Meta and WhatsApp Business Platform APIs.
• Through WhatsApp webhook events.
• Through business systems connected to Ordering Prototype.
• Automatically through application and security logs.

We use information to:

• Connect authorised WhatsApp Business Accounts.
• Send and receive WhatsApp messages.
• Display conversations to authorised business users.
• Automate product enquiries and ordering conversations.
• Transfer conversations between automation and human agents.
• Create and manage message templates.
• Record message delivery and read statuses.
• Provide technical support.
• Prevent fraud, misuse and unauthorised access.
• Monitor and improve reliability.
• Comply with legal and regulatory obligations.

We do not sell personal information.

We do not use customer conversations for unrelated advertising.

Ordering Prototype may use automated rules to understand customer requests, display products, collect order information and prepare responses.

Where an artificial-intelligence provider is enabled, relevant message content may be sent to that provider solely to generate a response or perform the requested business function.

Before enabling an AI provider, this policy will identify:

• The AI provider being used.
• The information sent to that provider.
• The purpose of the processing.
• Applicable retention and model-training settings.

Current AI provider: Not currently enabled.

Businesses remain responsible for reviewing automated responses and ensuring that human assistance is available where appropriate.

Meta and WhatsApp

Messages and connected business-account information are processed through Meta's WhatsApp Business Platform in accordance with Meta's applicable terms and privacy policies.

Service providers

We may use trusted service providers for:

• Cloud hosting.
• Application monitoring.
• Error reporting.
• Email delivery.
• Database hosting.
• File storage.
• Artificial-intelligence processing, when enabled.

These providers may only process information for the services they provide to us and are required to protect it appropriately.

Participating businesses

Customer messages and order information are made available to the business the customer contacted and to that business's authorised employees or agents.

Legal requirements

We may disclose information where reasonably required to:

• Comply with applicable law.
• Respond to a lawful request.
• Protect users, businesses or the public.
• Investigate fraud or security incidents.
• Enforce our agreements.

Meta, WhatsApp and some of our service providers may process information in countries other than the country where the customer or business is located.

Where required, we use appropriate contractual, organisational and technical safeguards for international transfers.

We retain information only for as long as reasonably necessary for the purposes described in this policy.

Our intended retention periods are:

• WhatsApp message content: 90 days.
• Order information: 5 years where required for business or tax records.
• Technical and security logs: 90 days.
• Connected account information: while the business account remains connected.
• App Review and test data: 30 days.

A participating business may configure different retention periods where permitted by law.

When information is no longer required, it is deleted, anonymised or securely archived where retention is legally required.

We use reasonable technical and organisational security measures, including:

• Encrypted HTTPS connections.
• Access controls.
• Restricted administrative permissions.
• Secure storage of API credentials.
• Webhook verification.
• Logging and monitoring.
• Separation of business accounts.
• Regular software and dependency updates.

No internet-based system can guarantee absolute security.

Depending on applicable law, individuals may have the right to:

• Request access to their information.
• Request correction of inaccurate information.
• Request deletion.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request a portable copy of information.
• Complain to an applicable data-protection authority.

A customer may contact either the business they messaged or us using the contact information below.

To request deletion of information associated with Ordering Prototype, email:

orbitsinnovations@gmail.com

Use the subject line:

Ordering Prototype Data Deletion Request

Include:

• Your name.
• Your WhatsApp number, including country code.
• The name of the business you contacted.
• An approximate date of the conversation.
• A description of the information you want deleted.

We may request reasonable verification before processing the request. We will respond within the period required by applicable law.

Businesses may disconnect Ordering Prototype from their Meta Business settings. Following disconnection, we will delete or anonymise associated information unless retention is required for legal, fraud-prevention or security purposes.

Ordering Prototype is intended for use in business communications and is not designed to knowingly collect information directly from children without appropriate authorisation.

If we learn that information was collected from a child contrary to applicable law, we will take reasonable steps to delete it.

Ordering Prototype relies on third-party services, including Meta and WhatsApp. Their processing is governed by their own terms and privacy policies.

We are not responsible for the privacy practices of independently operated third-party websites or services.

We may update this Privacy Policy when the application, legal requirements or service providers change.

The updated policy will be published on this page with a revised “Last updated” date. Material changes may also be communicated through the application or directly to participating businesses.

Questions, privacy requests and complaints can be sent to:

Orbits Innovations
Email: orbitsinnovations@gmail.com
Address: Republic of Mauritius
Telephone: +230 58355940