1. Who we are
OrderPilot provides WhatsApp-based ordering tools for restaurants. Restaurants use OrderPilot to manage menus, receive customer orders, connect WhatsApp Cloud API, and track order status from receipt to delivery.
2. Information we collect
We may collect the following information:
- Restaurant account information, including business name, address, contact number, owner name, and owner email.
- Menu and catalogue information, including categories, item names, prices, descriptions, and item images.
- WhatsApp integration information, including WhatsApp Business Account IDs, phone number IDs, catalogue IDs, webhook events, and access tokens stored securely on our backend.
- Customer order information, including customer phone number, customer name, delivery address, selected items, payment method, receipt image metadata, order status, and conversation session state.
- Technical information, including browser type, IP address, device information, API logs, error logs, and usage events needed to operate and secure the service.
3. How we use information
We use information to:
- Provide WhatsApp ordering, menu, catalogue, order tracking, and dashboard features.
- Route WhatsApp webhook messages to the correct restaurant.
- Send automated customer replies and order status updates through WhatsApp Cloud API.
- Help restaurants manage incoming orders and customer communication.
- Improve reliability, security, support, and product performance.
- Comply with legal, platform, and Meta requirements.
4. Meta and WhatsApp data
When a restaurant connects WhatsApp through Meta, OrderPilot may receive access to WhatsApp Business assets selected during Meta Embedded Signup or Facebook Login for Business. We use this access only to operate the restaurant ordering workflow, including message sending, webhook processing, catalogue support, and account configuration.
OrderPilot does not sell WhatsApp customer data. We do not use customer messages for unrelated advertising.
5. Sharing of information
We may share information only when needed to provide or secure the service:
- With Meta/WhatsApp to send and receive WhatsApp messages.
- With hosting, database, storage, analytics, and infrastructure providers used to run OrderPilot.
- With a restaurant account owner or authorized staff for their own restaurant data.
- When required by law, regulation, legal process, or platform compliance.
6. Data storage and security
We use reasonable technical and organizational safeguards to protect data. Sensitive integration values such as access tokens are stored encrypted where supported by the application backend. No internet service can guarantee complete security, but we work to reduce risk and restrict access to operational needs.
7. Data retention
We retain restaurant, order, WhatsApp log, and account data for as long as needed to operate the service, provide support, comply with legal obligations, resolve disputes, and maintain audit history. Restaurants may request deletion as described in our Data Deletion page.
8. Your choices
- Restaurants may request account export, correction, disconnection, or deletion.
- Restaurants may disconnect Meta/WhatsApp access from Meta Business settings.
- Customers may contact the restaurant directly to request order data correction or deletion.
9. Contact
For privacy questions or deletion requests, contact us at hello@orderpilot.pk.