Privacy Policy

This Privacy Policy explains how ManyOrdr collects, uses, and protects your information when you use our website, mobile apps, and paid subscriptions.

ManyOrdr ("we", "our", "us") helps Instagram sellers manage comment-to-order campaigns, products, and customer orders through our website and mobile apps (including the Android app). This policy explains what data we collect and how we use it.

Information we collect

When you create an account, we collect your email address, display name, mobile phone number, country, market (India or international), billing currency, profile details, and login credentials. If you sign in with Google, we receive your Google account email and name from Google (and any profile picture Google provides) to create or sign in to your ManyOrdr account; we do not receive your Google password. With your permission, we also access your Instagram data — your professional account ID, username, profile picture, posts and reels, comments on your media, incoming and outgoing Instagram direct messages needed for inbox and auto-reply features, and the ability to send direct messages (including private replies to commenters and replies to people who message you) — solely to power the Instagram features you've enabled. Where you enable follow prompts, we may also look up whether a messaging user follows your professional account (via Instagram's user profile fields) so we can show or gate menu options as you configured. As you use the dashboard, we store the business data you create yourself, including your products, campaigns, orders, inventory, DM auto-reply settings and options, message activity logs (including Direct inbox threads), and plan usage counters. When a customer places an order through your campaign link, we collect their name, phone number, delivery address, and order details on your behalf so you can fulfill it. And when you subscribe to a paid plan, we collect billing-related information such as your plan tier, subscription status, billing period dates, billing currency (INR or USD), payment and receipt identifiers (for example Razorpay payment or subscription IDs), invoice and receipt numbers, and amounts paid; your card, UPI, net-banking, or other payment details are collected and processed directly by our payment partner, Razorpay, and we never store your full payment credentials. If you are on the international market, we also store any external online payment link URL you provide for buyer prepaid checkout and display it on your order forms; we do not process or settle buyer payments through that link.

Mobile app and push notifications. If you use the ManyOrdr mobile app, we may collect a device push token (for example an Expo push token delivered via Firebase Cloud Messaging on Android) so we can send you transactional notifications such as new-order alerts. We store that token with your seller account and the device platform. You can turn off notifications in your device settings; uninstalling the app or deleting your account stops further pushes from us.

Essential cookies only. We strictly use essential authentication, session, and security cookies required for you to stay logged in and use the platform. We do not deploy third-party advertising cookies, cross-site tracking pixels, or marketing analytics tools that require user consent under GDPR or ePrivacy regulations. In the mobile app we store login/session data in secure on-device storage and may use a WebView with cookies so the dashboard stays signed in after native login. Buyers may have limited referral data kept in browser session storage so an Instagram comment can be linked to an order form.

Diagnostics. We use error-monitoring tools (currently Sentry) to capture technical crash and error reports so we can fix bugs and keep the service reliable. We configure those tools not to send unnecessary personal details by default; reports may still include device/app technical metadata and approximate location derived from IP as provided by the monitoring vendor.

How we use your data

We use this information to authenticate you and give you access to your seller dashboard (on the web and in the mobile app), to connect and maintain your Instagram integration, and to match incoming comments to the right campaign so we can send order links over Instagram DM, public comment replies, and order status updates where enabled, to power cold-DM auto-replies and, on Commerce Pro, the Direct / Campaign messaging inboxes (including optional follow checks before menu buttons), to meter plan usage (including your daily auto message allowance), and to show comment and message status inside your dashboard. We also use it to process and manage the orders your customers place, to send transactional push notifications about orders when you use the mobile app, to handle subscription payments, renewals, one-time hourly boost purchases, receipts, and billing support, and more generally to maintain security, prevent abuse, diagnose errors, and improve the service over time.

Seller-uploaded content

Product images, campaign files, messages, links, and other materials you upload or send are stored to provide the service. You remain responsible for that content. We may remove or disable content, and may suspend accounts, when we believe it is illegal, abusive, or otherwise violates our Terms, or when required by law or a connected platform.

Data sharing

We do not sell your personal data. We share it only with the service providers required to run ManyOrdr — hosting, database, email, payment, push-delivery, and error-monitoring providers — and with Meta and Instagram as needed to provide the integration features you authorize. Subscription payments and one-time hourly boost payments are processed by Razorpay (in INR or USD depending on your market), and we share the billing data necessary to complete those transactions, keep your subscription active, and apply purchased hourly boosts. Push notifications are delivered through Expo and, on Android, Firebase Cloud Messaging; we share the device push token and notification content needed to deliver those alerts. We may also disclose data where required by law.

Logistics integrations

If you are on the India market and connect a third-party logistics account (for example iThink Logistics) on an eligible plan, we store your provider API credentials in encrypted form, your selected warehouse or pickup location, and shipment metadata (such as AWB numbers and courier names) in your dashboard. When you create or request a shipment, we send the order and package information needed to book that shipment — such as buyer name, phone number, delivery address, product details, and the weight and dimensions you enter — to your chosen provider on your behalf. That provider receives and processes data under its own terms and privacy policy. ManyOrdr does not control how the provider uses data once it leaves our systems.

Data retention

We retain your account, Instagram connection, campaign, and order data for as long as your account stays active. Device push tokens are kept while your account is active and the app remains registered for notifications; they are removed when you delete your account, when a token becomes invalid, or when we clear stale tokens. Billing and receipt records may be kept longer where needed for accounting, tax, or legal compliance, even after you cancel. Instagram access tokens are stored securely and refreshed as needed; we do not cache Meta/Instagram personal user data indefinitely without refresh. Meta profile, media, comment, and messaging data used to operate the integration is kept only while your Instagram connection remains active and is refreshed or discarded when tokens expire, you disconnect Instagram, or you delete your account. You can delete your data at any time from Settings → Account or our public data deletion page, subject to the legal retention requirements that apply to payment records.

Roles for buyer personal data

For buyer details collected through a seller's campaign order form (such as name, phone number, and delivery address), the Instagram seller is the Data Controller. ManyOrdr acts as a Data Processor on the seller's behalf to store and display that information so the seller can fulfill orders. Sellers are responsible for responding to buyer requests about that order data.

Your rights

You can disconnect your Instagram account or permanently delete your ManyOrdr account and its associated data from Settings → Account at any time. If you're a buyer who placed an order through a seller's link, order-related requests should go to that seller directly rather than to us. For privacy questions about your own subscription billing data, contact us at hello@manyordr.com.

Buyer orders

When a customer places an order through a seller's campaign link, we collect the details they enter — name, phone number, delivery address, product choice, payment method selection, and any optional notes — and share them with the seller so the order can be fulfilled. We are not a party to the sale between buyers and sellers, so buyers should contact the seller directly for anything related to order status, delivery, returns, refunds, or product issues. Questions about data submitted on an order form itself can be sent to hello@manyordr.com.

Grievance Officer

Under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, you may contact our designated Grievance Officer. The Grievance Officer is Mohammed Haseeb, Grievance Officer at Grabliv Commerce Pvt Ltd, and can be reached at hello@manyordr.com.

Contact

For privacy questions, contact us at hello@manyordr.com.

International rights and data transfers

ManyOrdr processes and stores data on secure servers in India and global cloud regions. If you access the service from outside India, you have the right to request access to, correction of, or deletion of your personal data. To exercise these rights, contact us at hello@manyordr.com.