01Overview
This Privacy Policy explains how we collect, use, store, and share information when you use the Order Central Owner mobile application ("the App"). Order Central Owner is a business management tool for restaurant and store owners, managers, and authorized staff to view orders, analyze sales, manage staff, and handle payment-related operations through the OrderCentral platform.
By using the App, you agree to the practices described in this policy.
02Who this app is for
Order Central Owner is a business-to-business (B2B) application intended for adults who are authorized owners, operators, or staff of businesses using the OrderCentral platform. It is not directed at children, and we do not knowingly collect data from anyone under 13 (or under 16 in the EU/UK).
03Information we collect
2.1 Information you provide
- Account credentials — your username (typically email) and password, used to sign in.
- Profile information — first name, last name, email address, phone number, mailing address, profile image. This is created and managed through the OrderCentral platform; the App reads and displays it.
- Refund and chargeback details — when you process a refund or contest a chargeback, we collect the order ID, your stated reason, and the transaction details you select.
- Voice queries — when you use the Voice Analytics feature, the audio captured by your device microphone (see Section 4).
2.2 Information collected automatically
- Authentication tokens — after you log in, an access token and refresh token are issued to keep you signed in.
- Device identifier — on Android devices, a non-resettable device ID is read; on iOS, no device identifier is collected. The device identifier is stored locally and is not used for advertising or cross-app tracking.
- App preferences — your language selection, dark-mode preference, selected business locations, pinned analytics tabs, chosen voice for the voice feature, and onboarding completion status.
- Cached business data — to make the App responsive offline, we cache your location list, customer profile, and a restaurant background image on the device.
2.3 Information we do not collect
- We do not collect your precise GPS location.
- We do not use the Apple advertising identifier (IDFA) or any cross-app tracking identifier. We do not track you across other apps or websites.
- We do not integrate third-party analytics SDKs such as Google Analytics, Firebase Analytics, Mixpanel, or Amplitude.
- We do not integrate third-party crash-reporting SDKs.
- We do not collect or process credit card numbers, CVVs, or bank account details inside the App. Payment processing is handled outside the App by your point-of-sale system.
- We do not show advertising and we do not sell your personal information.
04How we use your information
We use the information described above only to:
- authenticate you and keep you signed in;
- show you orders, analytics, staff records, payments, and other business data for the locations you are authorized to access;
- let you process refunds and respond to chargebacks;
- let you ask voice-driven questions about your business analytics (see Section 4);
- remember your in-app preferences (language, theme, pinned views);
- send transactional and operational push notifications, if you grant notification permission;
- comply with legal obligations.
We do not use your information for advertising, profiling for marketing, or for purposes unrelated to running your business on OrderCentral.
05Voice Analytics feature (microphone, OpenAI)
Order Central Owner includes an optional Voice Analytics feature that lets you ask spoken questions about your business data ("What were my top items last week?"). This feature uses your device's microphone and is powered by OpenAI's Realtime API.
When you start a voice session:
- The App requests microphone permission. If you decline, the feature does not work; the rest of the App still works normally.
- The App requests a short-lived ("ephemeral") session token from our server.
- Using that token, the App opens a direct WebRTC connection from your device to OpenAI. Audio captured from your microphone is streamed directly to OpenAI; it does not pass through our servers.
- OpenAI returns transcripts and synthesized voice responses, and may issue tool calls (read-only database queries) that our server executes against your business data and returns answers for.
- Your audio is not stored on the device. It is streamed in real time and discarded after the session ends.
OpenAI's processing of audio sent through the Realtime API is governed by OpenAI's API data usage policies, available at https://openai.com/policies. As of the date of this policy, OpenAI states that data submitted via the API is not used to train OpenAI's models by default and is retained only for limited abuse-monitoring purposes.
If you do not want OpenAI to receive your voice, do not use the Voice Analytics feature.
06Permissions the App requests
The App may request the following permissions on iOS and Android. Each is requested only when needed for the feature you are using, and you may decline or revoke them at any time in your device settings.
| Permission | Why we ask |
|---|---|
| Microphone | Required for the Voice Analytics feature. Not requested otherwise. |
| Notifications | To send operational alerts (e.g., refund or chargeback updates). |
Declining a permission disables only the feature that needs it; the rest of the App continues to work.
07How information is stored and secured
- In transit, all communication between the App and our servers, and between the App and OpenAI, uses HTTPS / TLS encryption.
- On your device, the App stores authentication tokens, profile data, location lists, and preferences in the operating system's standard local app storage. This storage is sandboxed to the App by iOS and Android and is removed when you uninstall the App.
- On our servers, business data is held by OrderCentral's backend infrastructure with industry-standard access controls. Internal access is limited to authorized personnel.
- We retain your data for as long as your business account on OrderCentral is active and as required by applicable law and tax/accounting obligations.
No system is perfectly secure. While we take reasonable measures, we cannot guarantee that information transmitted to or stored by us will be free from unauthorized access.
09Your rights
Depending on where you live, you may have rights to:
- access the personal information we hold about you;
- correct information that is inaccurate;
- delete your information ("right to be forgotten");
- export your information in a portable format;
- object to or restrict certain processing;
- withdraw consent previously given.
Account deletion
Because Order Central Owner is a B2B tool tied to your business's OrderCentral account, account deletion is handled through your business administrator and our support team. To request deletion of your user account and associated personal data, email forward@ordercentral.us from the email address tied to your account. We will verify your identity, process the request within 30 days, and confirm completion.
How to exercise other rights
Email forward@ordercentral.us with your request. We may need to verify your identity before responding. We will not discriminate against you for exercising your rights.
If you are in the EU/UK, you also have the right to lodge a complaint with your local data protection authority.
10International data transfers
Our servers and OpenAI's servers are located in the United States. If you use the App from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection laws than your country. By using the App, you consent to this transfer.
11Children's privacy
The App is not directed at children. We do not knowingly collect personal information from anyone under 13 (or under 16 in the EU/UK). If you believe a child has provided us with personal information, contact us at forward@ordercentral.us and we will delete it.
12Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top, and — for material changes — notify you in the App or by email. Continued use of the App after an update means you accept the revised policy.
13Contact us
Email: forward@ordercentral.us
Mailing address: Order Central 200 Spectrum Irvine, California, 92705 United States
Website: www.ordercentral.us