Privacy Policy

1. Introduction

OrderSync ("we", "our", or "us") is operated by Emad Adwan. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

By using our platform at https://posauto.cloud/, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, business name, and subdomain when you register an account.
• Billing Information: Subscription plan details. Payment processing is handled by third-party providers — we do not store raw card data.
• Restaurant Order Data: Order details received from Careem Now and Talabat webhooks (items, quantities, prices, customer delivery addresses) for the purpose of syncing to your Loyverse POS.
• API Credentials: Loyverse API tokens and Careem/Talabat webhook secrets, stored encrypted in our database.
• Usage & Log Data: Sync logs, error reports, job queues, and technical metadata to operate and improve the service.
• Device & Browser Data: IP address, browser type, and access timestamps for security and analytics purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the OrderSync platform.
• Sync orders from Careem Now and Talabat to your Loyverse POS account.
• Send transactional emails (sync failure alerts, account notifications).
• Process subscription billing and communicate plan changes.
• Monitor system health, debug errors, and improve service reliability.
• Respond to your support requests and inquiries.
• Comply with legal obligations.

4. Third-Party Services

Our service integrates with the following third parties, each governed by their own privacy policies:

• Careem Now / Talabat: Order data is received via webhooks from these platforms. We process this data solely to fulfil the sync service on your behalf.
• Loyverse POS: We transmit order data to your Loyverse account using your own API credentials.
• Email Providers: We use transactional email services to deliver notifications and alerts.

We do not sell, trade, or rent your personal information to third parties.

5. Data Security

We implement industry-standard security measures to protect your data:

• API credentials (tokens and secrets) are encrypted at rest using AES-256 encryption.
• All data in transit is protected via HTTPS / TLS.
• Access to tenant data is strictly scoped — no tenant can access another tenant's data.
• Passwords are hashed using bcrypt.

While we take security seriously, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide you the service. Order sync logs are retained for up to 90 days (Business plan) or as configured by your plan. Upon account deletion, your personal data is removed within 30 days, except where retention is required by law.

7. Your Rights

You have the following rights regarding your data:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request correction of inaccurate data.
• Deletion — Request deletion of your account and associated data.
• Portability — Request your data in a portable format.
• Objection — Object to how we process your data.

To exercise any of these rights, contact us at me@emadadwan.info.

8. Cookies

We use session cookies solely for authentication purposes. We do not use tracking cookies or advertising cookies. You may disable cookies in your browser settings, but this may affect your ability to log in.

9. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice in your dashboard. Continued use of the service after changes become effective constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us: