Privacy Policy

Order Lynx is operated by Carlos Urtuzuastequi, a sole proprietor doing business as Order Lynx (“Order Lynx,” “we,” “us”). This policy explains how we handle personal information when you use the Order Lynx website, storefronts, and dashboard (the “Service”). It should be read together with our Terms of Service.

Vendors and their staff

Your email address and password (stored in hashed form by our authentication provider, never in readable form), your business name, and — if you sign up through the Venmo option — your phone number. Content you upload to your storefront: menu items, prices, photos, logo, and the contact and fulfillment details you choose to show. Your orders and sales records. Your billing relationship with us: we keep Stripe customer and subscription identifiers, but your card number is entered on Stripe’s own pages and is never stored by us. If you have staff logins, we record which login made which change to the storefront.

Customers who order

When you place an order we collect your name, your phone number, your delivery address (only for delivery orders), any notes you add, what you ordered, and whether you’d like a text when it’s ready. You don’t create an account, and we don’t ask for your email address. If you pay by card, your card details are entered with Stripe, not with us. If you choose to turn on order-ready notifications, we store the push subscription your browser generates so the vendor’s “ready” action can reach your device.

Collected automatically

In production we use an error-monitoring service that receives technical diagnostics when something breaks, such as the page involved, browser type, and error details. Our hosting and database providers keep ordinary server logs. We do not use advertising trackers or third-party analytics.

We use this information to operate the Service: to create and secure accounts, show storefronts, pass orders to the vendor you ordered from, process payments and payouts, bill vendors for their subscription, send transactional emails (such as a new vendor’s sign-in link and billing reminders), fix errors, prevent abuse, and answer your questions. We don’t use it to build advertising profiles.

The vendor you order from. Your order details, name, phone number, and delivery address go to that vendor so they can fulfill your order. Each vendor is an independent business responsible for how it uses what it receives; Order Lynx does not control that.

Service providers that process information on our behalf:

• Supabase — our database, sign-in system, and file storage.
• Vercel — hosts the website and application.
• Stripe — card payments, vendor payouts, and our subscription billing. Stripe’s use of your information is governed by its own privacy policy.
• Resend — delivers the transactional emails we send.
• Mapbox — address suggestions: as you type a delivery address or a storefront location, what you type is sent to Mapbox to return matching addresses.
• GlitchTip — error monitoring.
• Your browser’s push service (run by Apple, Google, or Mozilla, depending on your browser) — only if you opt in to order-ready notifications.

Links to Venmo, Zelle, or PayPal take you to those services, which handle that payment under their own terms; we don’t see those transactions. We don’t sell personal information. We may disclose information if the law requires it or to protect against fraud or abuse.

Vendors stay signed in using cookies set by our sign-in system; these are necessary for the dashboard to work. Your browser’s local storage holds your cart for each storefront, the name and phone number you entered at checkout so you don’t retype them next time, and, on the sign-in page, the email you last used. All of that stays on your own device and you can clear it in your browser settings at any time.

We keep information for as long as it’s needed to run the account or storefront it belongs to and to keep records of orders and payments. When a vendor’s storefront is permanently deleted, its products, orders, customer records, and the owner’s login are deleted with it. Some records, such as payment records held by Stripe, may be kept longer where the law or the payment networks require it.

You can ask us what personal information we hold about you, ask us to correct or delete it, or ask us to stop using it, by emailing hello@order-lynx.com. Because a customer’s order information also sits with the vendor they ordered from, you may need to contact that vendor as well; we’ll help where we can.

If you live in California, you have the right to know what personal information we collect and how it’s used, to request deletion or correction, and not to be treated differently for exercising those rights. We don’t sell personal information or share it for cross-context advertising.

We use reasonable technical and organizational measures to protect information, including encrypted connections and access controls on our database. No online service can promise perfect security, so we can’t guarantee it.

The Service isn’t directed to children under 18, and we don’t knowingly collect personal information from them. If you believe a child has given us information, contact us and we’ll delete it.

We may update this policy as the Service changes. We’ll post the new version here with a new effective date, and for material changes we’ll make reasonable efforts to notify vendors directly.

Questions or requests about this policy can be sent to hello@order-lynx.com.