Last updated: September 26, 2026
GetOrda ("we", "our", or "us") operates getorda.app. This Privacy Policy explains how we collect, use, and protect information when you use our WhatsApp AI business platform. By using GetOrda, you agree to this policy.
Two groups of people are described here: the business that holds a GetOrda account, and that business's own customers whose messages and orders pass through the service. Where a business uses GetOrda to handle its customers, the business decides what it collects and why, and we process that information on the business's behalf and on its instructions.
Account information: name, email address, phone number, and password credentials created at registration.
Business information: your business name, category, location, opening hours, delivery areas and fees, storefront settings, and the payment details you choose to publish to your customers.
Catalogue information: the products or services you list, including names, descriptions, prices, categories, and any images you upload.
When you connect WhatsApp or run a storefront, the following passes through GetOrda so the service can work:
• Customer contact records, such as the name shown on a customer's messaging profile, their number or messaging identifier, and their profile photo where their privacy settings make it available • Conversation content, including messages, transcriptions of voice notes, and descriptions of images sent to your account • Order and transaction records you create or your customers place, including items, amounts, delivery details, and payment status you record • Storefront visit records, so a business can see activity on its own storefront
This information belongs to the business whose account it sits in. It is never shared with another GetOrda business.
We process basic technical information needed to run and secure the platform: IP address, browser and device type, pages requested, timestamps, and error and diagnostic data when something fails.
We use this to keep accounts secure, detect abuse, diagnose faults, and understand which parts of the product are used. We do not use third-party advertising or cross-site tracking technology on getorda.app.
Where you buy a subscription, payment is handled by our payment provider, Paddle, which acts as merchant of record for the transaction. Card numbers and full payment credentials are entered with that provider and are not collected or stored by GetOrda.
We receive and keep the records we need to administer your account, such as which plan you are on, your billing interval, the status of your subscription, and the receipts or invoices associated with it.
• To provide the service: generating replies, running your catalogue and storefront, capturing orders, and sending the notifications you configure • To send service email, such as account confirmation, password reset, and order or activity alerts • To operate, secure, and support your account, including responding to your support requests • To detect and prevent fraud, abuse, and unauthorised access • To maintain and improve the product, including diagnosing errors and understanding feature usage
We do not sell your data. We do not use your business data or your customers' conversations to train AI models without your explicit consent.
To operate GetOrda we rely on a small number of service providers, each acting on our instructions and bound by data-protection terms. They cover:
• Cloud hosting, application delivery, and database storage • Authentication and account sign-in • AI processing, to generate replies and interpret messages, voice notes, and images • Transactional email delivery • Error monitoring and diagnostics • Subscription payment processing
For the current list of our sub-processors, email support@getorda.app and we will provide it.
GetOrda connects to WhatsApp, a product of Meta, using credentials you authorise. Messages travel through WhatsApp's own systems and are subject to Meta's terms and privacy practices, which we do not control. GetOrda is not affiliated with, endorsed by, or sponsored by WhatsApp or Meta.
If you connect or publish other third-party services through GetOrda, such as a payment method you display to customers, that provider's own terms and privacy practices apply to what happens on their side.
Your data is stored on managed cloud infrastructure hosted in the European Union (Ireland). Data is encrypted in transit using TLS, and encrypted at rest by our infrastructure providers.
Access to production data is restricted to the small number of people who need it to operate and support the service. Accounts are separated at the database level so that one business cannot read another business's data, and WhatsApp session credentials are held privately to the account they belong to.
No internet service can be guaranteed completely secure, and we do not claim certification under any particular security standard. We describe our practices here so you can judge them for yourself.
GetOrda is used by businesses in a number of countries, and our infrastructure and service providers may process data outside the country where you or your customers are located, including in the European Union and other jurisdictions where our providers operate.
Where information is transferred across borders, we rely on the data-protection terms agreed with the providers involved.
We retain account, catalogue, conversation, and order information for as long as your account is active, because the product's value depends on that history being available to you.
If you delete your account, we delete or anonymise the associated data, other than records we must keep for legal, tax, accounting, or fraud-prevention reasons, and limited backup copies which are removed on our normal backup cycle.
You may request an export of your data within 30 days of termination, as set out in our Terms of Service.
Depending on where you live, you may have the right to:
• Access the data we hold about you • Correct data that is inaccurate • Delete your account and its data • Export your data in a portable format • Object to or restrict certain processing • Withdraw consent you have given
To exercise these rights, email support@getorda.app from the address on your account. We aim to respond within 30 days.
If you are a customer of a business that uses GetOrda, contact that business first, since the information is held in their account and they decide what happens to it. We will support them in responding to you.
Messages from your customers are processed to generate the replies your account sends. That information is stored in your account, is only accessible to your business, and is never shared with other businesses.
A customer can opt out of automated messaging at any time by sending "STOP". You remain responsible for honouring opt-outs and for complying with the messaging and marketing rules that apply where you operate.
We use essential cookies only, for authentication sessions and security. We do not use tracking or advertising cookies, and we do not set third-party advertising cookies on getorda.app. Full detail is in our Cookie Policy at getorda.app/cookies.
GetOrda is not directed at children under 16, and it is a product for businesses. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact support@getorda.app and we will remove it.
We may update this policy. We will notify you by email and by posting the updated policy at getorda.app/privacy, with a revised date at the top. Your continued use after changes take effect constitutes acceptance.
Questions about this policy, or a request about your data?
GetOrda Support Email: support@getorda.app