Privacy Policy
Last updated: April 2, 2026
1. Overview
Order Express provides custom online ordering websites for restaurants, with integrated online ordering and payments. This policy explains what data we collect, why we collect it, and how we protect it. We keep things simple: we collect only what we need to operate the service, and we don't sell your data to anyone.
2. Information We Collect
We collect different information depending on whether you are a Restaurant (business using Order Express) or a Customer (person placing an order online).
From Restaurants
- Account information: name, email address, phone number, and restaurant name when you sign up.
- Payment information: payouts are handled through Stripe, which is governed by Stripe's terms. We do not store your bank account or card numbers.
- Menu and business data: your menu items, hours, delivery zones, and settings as configured in your dashboard.
- Usage data: order history and dashboard activity.
From Customers
- Contact information: the name and phone number (and email, if provided) entered at online checkout, used for order updates and fulfillment.
- Order details: items ordered, delivery address (if applicable), and any special instructions.
- Payment information: card payments are processed by Stripe. Order Express does not store card numbers.
3. How We Use Your Information
- To operate the Order Express service — hosting your website, taking online orders, and displaying them in your dashboard.
- To facilitate online payments through Stripe and send billing-related communications.
- To improve the quality and reliability of the service.
- To provide customer support when you contact us.
- To send service-related notices (outages, billing changes, terms updates).
We do not use your data for advertising. We do not sell, rent, or share your data with data brokers or ad networks.
4. Payments
Payments are processed by Stripe, and Order Express does not store card numbers. When a Customer pays for an order, the payment is handled by Stripe and the funds are routed directly to the Restaurant's connected Stripe account. Order Express collects the order details and the contact information the Customer provides at checkout to fulfill the order; card data is handled by Stripe under the Stripe Privacy Policy.
5. Third-Party Services
We use the following third-party services to operate Order Express:
- Stripe — payment processing and payouts to Restaurants. Stripe receives payment information and is governed by the Stripe Privacy Policy.
- Hosting and infrastructure providers — to host restaurant websites and operate the ordering system. These providers process data only as needed to run the service.
We do not share your data with any other third parties except as required by law.
6. Data Retention
- Order data is retained for 90 days by default, then automatically deleted.
- Account information is retained for as long as your account is active.
- Payment records are retained as required for tax and legal compliance.
- Upon account deletion, all associated data (orders, menu, settings) is permanently removed within 30 days.
7. Data Security
All data is transmitted over encrypted connections (TLS). Dashboard access requires authentication. We limit internal access to customer data to what is necessary to operate and support the service.
8. Your Rights
- You can view, export, or delete your order data from your dashboard at any time.
- You can request deletion of your entire account and all associated data by emailing admin@orderexpress.app.
- If you are a Customer and want your contact information or order data removed, contact the restaurant directly or email us.
9. SMS Messaging
When a Customer places an order through Order Express, they may opt in at online checkout to receive transactional SMS order updates to the phone number they provide:
- Order updates: transactional order-status messages, such as confirmation that an order has been received and a notice when it is ready.
Consent. Customers opt in at online checkout by selecting an unchecked opt-in checkbox when placing their order, and messages are sent only if the Customer affirmatively opts in. Only the phone number the Customer provides at checkout is used, and messages are strictly transactional — never marketing. Full SMS disclosures are documented in our SMS Terms.
Opt-out. Customers can reply STOP at any time to opt out of future messages. We honor opt-outs immediately. Reply HELP for assistance. Message and data rates may apply. Message frequency is order-driven.
No sharing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use-case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Phone numbers collected for SMS are used solely to deliver the transactional messages described above.
10. Cookies
The Order Express website and dashboard use only essential cookies required for authentication and session management. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.
11. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will notify active Restaurants by email. The "last updated" date at the top of this page reflects the most recent revision.
12. Contact
Questions about this policy? Email us at admin@orderexpress.app.