Privacy Policy

This Privacy Policy explains how ManyOrdr collects, uses, and protects your information when you use our website, mobile apps, and paid subscriptions.

ManyOrdr ("we", "our", "us") helps sellers manage comment-to-order campaigns, public shops, catalog and digital products, bookings, and customer orders through our website and mobile apps (including the Android app). This policy explains what data we collect and how we use it.

Information we collect

When you create an account, we collect your email address, display name, mobile phone number, country, market (India or international), billing currency, profile details, and login credentials. If you sign in with Google, we receive your Google account email and name from Google (and any profile picture Google provides) to create or sign in to your ManyOrdr account; we do not receive your Google password. With your permission, we also access your Instagram data — your professional account ID, username, profile picture, posts and reels, comments on your media, incoming and outgoing Instagram direct messages needed for inbox and auto-reply features, and the ability to send direct messages (including private replies to commenters and replies to people who message you) — solely to power the Instagram features you've enabled. Where you enable follow prompts, we may also look up whether a messaging user follows your professional account (via Instagram's user profile fields) so we can show or gate menu options as you configured. As you use the dashboard, we store the business data you create yourself, including your products (including digital delivery URLs and related metadata when you list digital products), commerce shop mode (physical, digital, or both), campaigns, orders, inventory, booking settings, services, availability, and booking records, DM auto-reply settings and options, message activity logs (including Direct inbox threads), and plan usage counters. When a customer places an order through your campaign link, we collect their name, phone number, delivery address, and order details on your behalf so you can fulfill it. And when you subscribe to a paid plan, we collect billing-related information such as your plan tier, subscription status, billing period dates, billing currency (INR or USD), payment and receipt identifiers (for example Razorpay payment or subscription IDs), invoice and receipt numbers, and amounts paid; your card, UPI, net-banking, or other payment details are collected and processed directly by our payment partner, Razorpay, and we never store your full payment credentials. If you are on the international market, we also store any external online payment link URL you provide for buyer prepaid checkout and display it on your order forms; we do not process or settle buyer payments through that link.

Mobile app and push notifications. If you use the ManyOrdr mobile app, we may collect a device push token (for example an Expo push token delivered via Firebase Cloud Messaging on Android) so we can send you transactional notifications such as new-order alerts. We store that token with your seller account and the device platform. You can turn off notifications in your device settings; uninstalling the app or deleting your account stops further pushes from us.

Cookies, consent, and similar technologies. We use essential authentication, session, and security cookies so you can stay signed in and use the platform securely. On our public marketing homepage we use Termly's consent management platform to show a cookie banner where required by law and to record your choices. If you accept marketing or analytics cookies on that page, we and our partners (including Meta Platforms, Inc. for advertising and measurement tools such as the Meta Pixel) may set cookies or similar technologies to measure ad performance, build audiences, and deliver relevant ads. Those tools are intended for the marketing site only and are blocked or limited until you consent where required. You can change your choices at any time using the consent preferences link on our homepage or your browser settings; Meta also offers ad controls at https://www.facebook.com/settings?tab=ads. Seller dashboards, buyer checkout pages, and seller storefronts are not used for this advertising measurement unless we say otherwise in an update to this policy. In the mobile app we store login/session data in secure on-device storage and may use a WebView with cookies so the dashboard stays signed in after native login. Buyers may have limited referral data kept in browser session storage so an Instagram comment can be linked to an order form.

Diagnostics. We use error-monitoring tools (currently Sentry) to capture technical crash and error reports so we can fix bugs and keep the service reliable. We configure those tools not to send unnecessary personal details by default; reports may still include device/app technical metadata and approximate location derived from IP as provided by the monitoring vendor.

How we use your data

We use this information to authenticate you and give you access to your seller dashboard (on the web and in the mobile app), to connect and maintain your Instagram integration, and to match incoming comments to the right campaign so we can send order links over Instagram DM, public comment replies, and order status updates where enabled, to power cold-DM auto-replies and, on Commerce Pro, the Direct / Campaign messaging inboxes (including optional follow checks before menu buttons), to meter plan usage (including your daily auto message allowance), and to show comment and message status inside your dashboard. We also use it to process and manage the orders and bookings your customers place, to reveal the seller's digital delivery link after payment is verified, to send transactional push notifications about orders when you use the mobile app, to handle subscription payments, renewals, one-time hourly boost purchases, receipts, and billing support, and more generally to maintain security, prevent abuse, diagnose errors, and improve the service over time.

Seller-uploaded content

Product images, campaign files, messages, links, and other materials you upload or send are stored to provide the service. You remain responsible for that content. We may remove or disable content, and may suspend accounts, when we believe it is illegal, abusive, or otherwise violates our Terms, or when required by law or a connected platform.

Data sharing

We do not sell your personal data. We share it only with the service providers required to run ManyOrdr — hosting, database, email, payment, push-delivery, and error-monitoring providers — and with Meta and Instagram as needed to provide the integration features you authorize. Subscription payments and one-time hourly boost payments are processed by Razorpay (in INR or USD depending on your market), and we share the billing data necessary to complete those transactions, keep your subscription active, and apply purchased hourly boosts. Push notifications are delivered through Expo and, on Android, Firebase Cloud Messaging; we share the device push token and notification content needed to deliver those alerts. We may also disclose data where required by law.

Logistics integrations

If you are on the India market and connect a third-party logistics account (for example iThink Logistics) on an eligible plan, we store your provider API credentials in encrypted form, your selected warehouse or pickup location, and shipment metadata (such as AWB numbers and courier names) in your dashboard. When you create or request a shipment, we send the order and package information needed to book that shipment — such as buyer name, phone number, delivery address, product details, and the weight and dimensions you enter — to your chosen provider on your behalf. That provider receives and processes data under its own terms and privacy policy. ManyOrdr does not control how the provider uses data once it leaves our systems.

Data retention

We retain your account, Instagram connection, campaign, and order data for as long as your account stays active. Device push tokens are kept while your account is active and the app remains registered for notifications; they are removed when you delete your account, when a token becomes invalid, or when we clear stale tokens. Billing and receipt records may be kept longer where needed for accounting, tax, or legal compliance, even after you cancel. If you used Free (or started paid without Free) for an Instagram account, we may retain Free-eligibility flags and an irreversible cryptographic hash of that Instagram account identifier after account deletion solely to prevent Free from being claimed again on that Instagram account, as described in our Terms of Service and Data Deletion policy. The raw Instagram account ID is not stored in that abuse-prevention record. Instagram access tokens are stored securely and refreshed as needed; we do not cache Meta/Instagram personal user data indefinitely without refresh. Meta profile, media, comment, and messaging data used to operate the integration is kept only while your Instagram connection remains active and is refreshed or discarded when tokens expire, you disconnect Instagram, or you delete your account. Booking settings, services, availability, and booking records are kept while your account is active and are removed when you delete your account (subject to any legal retention that applies to paid transactions). Digital delivery URLs you configure are kept while the product remains listed or until you delete the product or your account. You can delete your data at any time from Settings → Account or our public data deletion page, subject to the legal retention requirements that apply to payment records.

Roles for buyer personal data

For buyer details collected through a seller's campaign order form (such as name, phone number, and delivery address), the Instagram seller is the Data Controller. ManyOrdr acts as a Data Processor on the seller's behalf to store and display that information so the seller can fulfill orders. Sellers are responsible for responding to buyer requests about that order data.

Your rights

You can disconnect your Instagram account or permanently delete your ManyOrdr account and its associated data from Settings → Account at any time. If you're a buyer who placed an order through a seller's link, order-related requests should go to that seller directly rather than to us. For privacy questions about your own subscription billing data, contact us at hello@manyordr.com.

Buyer orders

When a customer places an order or booking through a seller's campaign link, public shop, or booking flow, we collect the details they enter — name, phone number, delivery address where required, product or service choice, payment method selection, and any optional notes — and share them with the seller so the order or booking can be fulfilled. We are not a party to the sale between buyers and sellers, so buyers should contact the seller directly for anything related to order status, delivery, returns, refunds, or product issues. Questions about data submitted on an order form itself can be sent to hello@manyordr.com.

Grievance Officer

Under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, you may contact our designated Grievance Officer. The Grievance Officer is Mohammed Haseeb, Grievance Officer at Grabliv Commerce Pvt Ltd, and can be reached at hello@manyordr.com.

Contact

For privacy questions, contact us at hello@manyordr.com.

International rights and data transfers

ManyOrdr stores account, order, product, and message data on secure servers in Mumbai, India (AWS Asia Pacific, ap-south-1). Requests to the website may be handled by our application host before they are saved there. Instagram messages are also processed by Meta on Meta's systems. If you access the service from outside India, you have the right to request access to, correction of, or deletion of your personal data. To exercise these rights, contact us at hello@manyordr.com.