Privacy Policy
1. Information We Collect
At OrderQuik, we collect different types of information to provide and improve our services. The information we collect includes:
1.1 Information Provided Directly by the User
- Registration data: Full name (first and last name), email address, phone number, and password when creating an account.
- Profile image: Optional photograph that the user may upload to their account.
- Order information: Selected items, customizations, special notes, and order preferences.
- Delivery data: Contact name and phone number for delivery orders.
- Support tickets: Content of inquiries, bug reports, and feature requests submitted to our support system.
1.2 Information Generated by Service Usage
- Order history: Complete record of all orders placed, including items, quantities, prices, tips, taxes, totals, payment method, and order status.
- Favorites: Menu items marked as favorites by the user.
- Language preference: Language selection (English or Spanish) within the platform.
- Session data: Date and time of last access, user type, and assigned role.
- Table information: For users accessing via QR/PIN: branch, table number, seat number, QR token, and temporary access PIN (expires in 3 hours).
- Order status history: Record of each status change in orders (pending, received, preparing, ready, delivered, cancelled) with timestamp and the user who made the change.
1.3 Payment Information
- Payment references: PayPal transaction identifiers associated with orders.
- Payment status: Record of each payment's status (pending, paid, partial).
- Refund information: Amounts, reasons, and refund types when applicable.
Important: OrderQuik does not store credit or debit card data. PayPal payments are processed entirely through PayPal's secure infrastructure.
1.4 Franchise and Business Information
For users with franchise owner, manager, or staff roles, we also collect:
- Business information: name, address, phone number, geographic location (latitude/longitude).
- Brand configuration: logos, icons, images, corporate colors.
- Business PayPal credentials (client_id and secret_key) for payment processing.
- Subscription and billing information.
- Financial records: daily closures, expenses, cash register records.
2. How We Use Your Information
We use the collected information for the following purposes:
- Order processing: Managing your orders, communicating status to the restaurant, and providing you with real-time updates.
- Authentication and security: Verifying your identity, protecting your account, and preventing unauthorized access through OAuth2 tokens and temporary PINs.
- Personalization: Remembering your favorite items, language preference, and default branch to enhance your experience.
- Communications: Sending you information about your orders, platform updates, promotions, and restaurant news.
- Payment processing: Facilitating secure transactions through configured payment methods, including PayPal integration.
- Customer support: Addressing your inquiries, support tickets, and resolving technical or service issues.
- Reports and analytics: Generating aggregated statistics for restaurants (daily sales, best-selling items, payment method breakdowns, hourly sales).
- Service improvement: Analyzing usage patterns to improve platform functionality and experience.
- Subscription management: Managing franchise subscription plans and processing corresponding recurring payments.
3. Data Sharing
We share your information only in the following circumstances:
- With the restaurant: Your order information (items, customizations, notes, delivery name, and phone number) is shared with the restaurant branch preparing your order.
- With payment processors: Data necessary to complete transactions is shared with PayPal according to their own privacy policies.
- Restaurant staff: Branch managers and kitchen staff have access to current order information for operational management.
- Legal requirements: We may disclose information when required by law, court order, or legal process.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. Data Security
We implement technical and organizational security measures to protect your information:
- Passwords: Stored using secure hashing algorithms; never saved in plain text.
- Authentication: OAuth2 token system with access and refresh tokens for secure sessions.
- Temporary PINs: Table access PINs automatically expire after 3 hours.
- Access control: Role and permission system (Admin, Owner, Manager, Cook, Customer) that limits information access based on the user's role.
- Logout PIN: Managers have a specific PIN to close table sessions, preventing unauthorized logouts.
- Secure payments: We do not store credit card data; payments are processed through PayPal's PCI-DSS certified infrastructure.
Despite our efforts, no security system is impenetrable. We cannot guarantee the absolute security of your information.
5. Data Retention
- Active accounts: We retain your information while your account is active and necessary to provide our services.
- Order history: Retained for accounting and operational reports. Deleted orders are marked as "soft delete" and may retain records for auditing purposes.
- Daily closures: Financial reports and order snapshots are retained as immutable accounting records.
- Table sessions: QR/PIN access data is deleted or automatically expires after the session ends.
- Cancelled subscriptions: Billing information is retained according to applicable legal and accounting requirements.
6. Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Rectification: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your account and personal data, subject to legal retention obligations.
- Portability: Request a copy of your data in a structured, commonly used format.
- Objection: Object to the processing of your data for specific purposes.
- Restriction: Request limitation of data processing under specific circumstances.
To exercise any of these rights, contact us through the means indicated in the contact section.
7. Cookies and Similar Technologies
Our web platform may use cookies and browser local storage to:
- Keep your session active after logging in.
- Remember your language preference.
- Improve platform performance and functionality.
The mobile application uses secure device storage to maintain authentication tokens and user preferences.
8. Children's Privacy
OrderQuik is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child, we will take steps to delete it as soon as possible.
9. International Data Transfers
Your data may be processed on servers located in different jurisdictions. We ensure that any international data transfer is carried out with appropriate data protection safeguards.
10. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy periodically. Changes will be published on the platform with a new version number and update date. We recommend reviewing this policy regularly.
11. Contact
For questions, requests, or concerns about this Privacy Policy or the handling of your personal data, contact us at:
- Email: info@orderquik.com
- Support system: Through the in-platform ticket system (available for users with an active subscription).