Legal Privacy Policy

Privacy Policy

At OrderBy, we're committed to protecting your privacy and complying with applicable data protection laws across India and internationally.

Last updated: July 11, 2026

This Privacy Policy applies to all users of the OrderBy platform and services provided by Sprachex Technologies Private Limited.

1. Introduction & Compliance

OrderBy ("we," "us," or "our") is operated by Sprachex Technologies Private Limited, headquartered in Kolkata, India. We are committed to maintaining the highest standards of data protection and privacy across all jurisdictions in which we operate.

This Privacy Policy is compliant with:

  • • Indian Information Technology Act, 2000 and Rules (2011)
  • • General Data Protection Regulation (GDPR) - EU/International Operations
  • • Digital Personal Data Protection Act (DPDPA), 2023 - India
  • • Consumer Protection Act, 2019 - India
  • • Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

2. Information We Collect

2.1 Customer Data

  • • Name, phone number, and email address
  • • Delivery address and location data
  • • Order history and preferences
  • • Shop owner's UPI ID (for direct payment by customer)
  • • OTP verification data

2.2 Shop Owner Data

  • • Business details and shop information
  • • UPI ID for receiving direct customer payments
  • • Shop inventory and pricing data
  • • Order records and order history
  • • Digital Khata (credit ledger) records
  • • Government-issued identification (for KYC verification)

2.3 Automatically Collected Data

  • • Usage analytics and platform interactions
  • • Browser type, operating system, and device information
  • • Cookies and similar tracking technologies
  • • Geolocation data (with user consent)
  • • Performance and error logging

2.4 Important Clarification: OrderBy as a Marketplace

OrderBy is a marketplace platform, not a financial intermediary or payment processor. We clarify the following:

  • • Customer Payments: Customers pay shop owners directly via UPI. OrderBy does not process, hold, or settle customer payments.
  • • UPI IDs: We only store the shop owner's UPI ID to facilitate direct customer payments. We do not store customer payment details.
  • • Shopkeeper Subscriptions: Subscription payments are processed by Razorpay (third-party PCI-DSS compliant processor). OrderBy does not store or handle card/bank details.
  • • No Fund Settlement: OrderBy does not hold, transfer, or settle funds between customers and shops. All transactions occur directly between parties.

3. How We Use Your Data

We use collected information for the following purposes:

  • Service Delivery: Processing orders, managing digital khata, facilitating direct UPI payments between customers and shops, and providing customer support
  • Verification & Security: OTP verification, fraud prevention, and identity verification for both customers and shops
  • Analytics & Improvement: Understanding platform usage, improving service quality, and personalization (with consent)
  • Communication: Sending order updates, promotional communications (only with consent), and transactional emails
  • Compliance: Meeting legal obligations, tax reporting, and regulatory requirements
  • Subscription Processing: Managing shopkeeper subscription payments via Razorpay (third-party processor). OrderBy does not store or process card/bank details.

4. Data Sharing & Third Parties

We share your data only when necessary and under strict data protection agreements:

  • • Subscription Payment Processor (Razorpay): For processing shopkeeper subscription payments only. No customer payment data is shared.
  • • Logistics Partners: For delivery coordination (with customer consent)
  • • Government Authorities: As required by law and for tax/regulatory compliance (with legal notices)
  • • Service Providers: Cloud hosting, analytics, support (Data Processing Agreements in place)

We do NOT sell your personal data to third parties. All third-party processors are contractually bound to maintain confidentiality and follow data protection practices aligned with this policy.

5. Data Security Measures

OrderBy implements industry-leading security measures to protect your personal information:

lock Encryption

End-to-end encryption for sensitive data, SSL/TLS for data in transit

security Access Control

Role-based access, multi-factor authentication, secure password practices

shield Compliance

ISO 27001 standards, regular security audits, PCI-DSS compliance

assignment Monitoring

24/7 security monitoring, incident response protocols, regular updates

6. Your Data Rights & Control

Under Indian and International laws, you have the following rights:

Right to Access: You can request a copy of your personal data at any time
Right to Rectification: You can correct or update inaccurate data
Right to Erasure: You can request deletion of your data (subject to legal obligations)
Right to Data Portability: You can request your data in a portable format
Right to Withdraw Consent: You can withdraw consent for non-essential data processing
Right to Opt-Out: You can opt out of marketing communications and certain tracking

To exercise these rights, please contact our Data Protection Officer at privacy@sprachex.com

7. Cookies & Tracking Technologies

OrderBy uses cookies and similar technologies to enhance your experience. You can control cookie preferences through your browser settings.

Cookie Types:

  • • Essential: Required for platform functionality
  • • Analytical: Help us understand platform usage (with consent)
  • • Preference: Remember your settings and preferences
  • • Marketing: Personalized content (requires explicit consent)

8. Data Retention Policy

We retain personal data for as long as necessary to provide services and comply with legal obligations:

  • • Active Account Data: For the duration of your account plus 12 months after closure
  • • Transaction Records: 7 years (for tax and compliance purposes, as per Indian law)
  • • Digital Khata Records: As per commercial and tax requirements
  • • Analytical Data: Aggregated and anonymized after 12 months
  • • Support Records: 2 years for dispute resolution

9. International Data Transfers

As Sprachex Technologies operates in both India and Germany, some of your data may be transferred internationally. We ensure all transfers comply with:

  • • GDPR adequacy determinations
  • • Standard Contractual Clauses (SCCs)
  • • Data localization requirements (where applicable)
  • • Adequate safeguards equivalent to Indian data protection standards

10. Children's Privacy

OrderBy is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected data from a minor without parental consent, we will delete it immediately. Parents or guardians who believe their child has provided information should contact us at privacy@sprachex.com

11. Contact & Grievance Redressal

For privacy concerns, data requests, or grievances:

mail
location_on

Postal Address

P 124 Jogendra Garden, Haltu,
Kolkata, West Bengal, India — 700078

person

Data Protection Officer

Response time: Within 30 days of receipt

12. Policy Updates & Changes

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of material changes by updating the "Last Updated" date and, where required, by obtaining your consent. Continued use of OrderBy after changes constitutes your acceptance of the updated policy.

13. Jurisdiction & Applicable Law

This Privacy Policy is governed by the laws of India and the Republic of India. For users in the EU, GDPR provisions will apply. Any disputes will be resolved under the jurisdiction of the Indian courts, except where international laws mandate otherwise.

Questions About Our Privacy Practices?

We're committed to transparency and accountability. Contact our privacy team for any questions or concerns.

Email Privacy Team Back to OrderBy