Privacy Policy

Last updated: September 24, 2026

1. Data controller

Marcos Jesús González Navarrete, personal ID 504390996, domiciled in Guanacaste, Costa Rica, is responsible for processing the personal data collected through Orderi. Contact: nmsoftwarelabinfo@gmail.com.

2. Data we collect

• From businesses (tenants): business name, email, phone, address, shop location on the map (coordinates, if the business chooses to set it), billing information.
• From end customers (buyers via WhatsApp/store): name, phone/WhatsApp number, delivery address, order history.
• Payment data: processed directly by our payment provider (Onvo); we do not store full card numbers on our servers.
• Technical data: IP address, browser type, session cookies, platform usage logs.

3. Purpose of processing

• Process and track orders.
• Show the business location on its public store with links to get there using Google Maps or Waze. The shop location is public by the business's choice; when those links are opened, the privacy policies of Google Maps or Waze apply.
• Manage accounts, subscriptions, and billing.
• Provide customer support.
• Generate aggregate analytics to improve the service.
• Comply with legal and tax obligations.

4. Consent

By registering on Orderi or placing an order through a store that uses Orderi, you grant your express, informed, and unambiguous consent to the processing of your personal data under this policy, as required by article 5 of Costa Rican Law 8968.

5. Third parties we share data with

We use the following providers to operate the service, who process data on our behalf:

• Infrastructure providers — database, authentication and image hosting.
• Payment processor — payment and subscription handling.
• Messaging provider — messaging with end customers.

We do not sell or trade personal data to third parties for advertising purposes.

6. Data subject rights (ARCO rights)

Under Law 8968, you have the right to:

• Access: know what data of yours we hold.
• Rectification: correct inaccurate data.
• Cancellation/Deletion: request deletion of your data.
• Objection: object to a specific processing activity.

These requests are free of charge and will be handled within a maximum of five (5) business days. Contact us at nmsoftwarelabinfo@gmail.com to exercise them.

7. Data security

We implement reasonable technical measures to protect information, including Row Level Security policies in the database, which ensure data isolation between the different businesses (tenants) using the platform.

8. Data retention

We retain personal data while the account remains active and, after cancellation, for a reasonable additional period for backup, tax, or legal requirements, before proceeding with deletion or anonymization.

9. Cookies

We use essential cookies for the site to function. See more detail in our Cookie Policy.

10. Minors

The service is not directed at minors. We do not knowingly collect data from minors without the consent of their parents or guardians.

11. Changes to this policy

We may update this policy occasionally. We will notify significant changes by email or through a notice within the platform.

12. Contact

For inquiries or to exercise your rights: nmsoftwarelabinfo@gmail.com.