Privacy Policy

1. Scope

This policy explains the principles for processing personal data collected through the orderly.com.tr website and the Orderly software operated by AISTECH YAZILIM A.Ş.

2. Data we collect

When you contact us through the website, your name, phone number and any business details you choose to share are processed. Anonymous usage data may be collected during site visits for measurement purposes.

The sales, stock and customer data that businesses using the Orderly software keep in the system belongs to the business concerned. This data is processed solely to provide the service.

3. Purposes of use

• Handling the information, quote and trial requests you make
• Providing the service, setup and technical support
• Fulfilling legal obligations
• Measuring and improving service quality

4. Retention period

Personal data is kept for as long as the purpose of processing requires and for the limitation periods set out in the relevant legislation. At the end of that period it is deleted or anonymized.

5. Sharing with third parties

Your data is not shared with third parties other than the infrastructure and integration providers that are essential to providing the service. Requests from legally authorized public authorities are reserved.

6. Cookies

In addition to essential cookies, the site may use measurement and advertising cookies. For details, see the Cookie Policy page.

7. Mobile apps

This section covers the Orderly mobile apps published by AISTECH YAZILIM A.Ş.:

• Android — Google Play, package name: com.orderly.garsonapp
• iOS — App Store, bundle ID: com.orderly.garsonapp

Both apps use the same codebase and the same server infrastructure; the data processing described in this section is the same for both platforms. There is no difference between the platforms in the types of data collected.

Orderly is a business (B2B) app designed for restaurants and cafés to manage their front-of-house operations. A current Orderly business account is required to use the app; new accounts cannot be created from within the app. There are no in-app purchases or subscription sales.

7.1 Data we collect

Account and authentication data. The email address and password of the business account, and the staff ID and staff password used when selecting a staff member. This data is sent to our servers solely for sign-in and authorization.

Customer data entered by the business. Customer names, phone numbers, delivery addresses and free-text notes about customers entered by the business's staff in the delivery and customer card features. The data controller for this data is the business that enters it; AISTECH YAZILIM A.Ş. acts as a data processor with respect to this data.

Transaction and financial records. Order records, payment records (amount and payment type), discount and comp details, open account (tab) debt and collection balances, expense records and stock movements.

The app does not collect or process credit card numbers, CVVs, IBANs or similar payment instrument details. “Credit card” is a payment type label the business selects to categorize a collection; the app has no integration with any payment institution.

Staff activity records. The app keeps an activity record (audit trail) that the business manager can view. Actions such as staff signing in and out of the app; opening, updating and voiding orders; taking payments; and end-of-day and stock operations are recorded along with the ID of the staff member who performed them. This record is kept for internal control and fraud prevention.

Uploaded documents. Invoice or receipt files uploaded to the app by staff during transfers between branches.

Device identifier. To distribute app updates, a device-specific identifier and the app version are used in check requests made to the update server.

7.2 Data we don't collect

The app does not collect location data, contacts, calendars, messages, photos and videos, audio recordings, health data or web browsing history.

The app shows no ads. No third-party advertising, analytics or crash reporting software (SDKs) is used. Users are not tracked across devices or apps; no advertising identifier (Android Advertising ID or iOS IDFA) is used, and no data collected through the app is processed for advertising purposes or transferred to third parties.

7.3 Purposes of use

The data collected is processed only for the following purposes:

• Providing the service and running the app (ordering, payment and reporting features)
• Account management, sign-in and staff authorization
• Internal audit trail, security and fraud prevention
• Distributing app updates

Data is not used for marketing purposes and is not sold to third parties.

7.4 Data transfer and security

All data transferred between the app and our servers is encrypted using the HTTPS protocol. Data can be accessed only by staff authorized by the business concerned, within the scope of their permission level.

7.5 Retention period

Data is kept for as long as the business account is active and for the retention periods required by the relevant legislation. If the account is closed, the data is deleted or anonymized, subject to legal retention obligations.

7.6 Service providers

Expo (EAS Update — u.expo.dev) infrastructure is used as a service provider to distribute app updates. In this context, the device identifier and app version are sent to that service provider during update checks.

The apps are distributed through Google Play and the App Store. Google's and Apple's own privacy policies apply to downloading and installing the app and to store transactions other than purchases.

Other than these, personal data is not shared with third parties.

7.7 Deleting your data

To request deletion of your personal data processed through the mobile apps, write to info@orderly.com.tr stating your business name and your request. Requests are resolved within 30 days at the latest.

For customer data entered by a business's staff, requests should first be directed to the business that entered the data; if the request is sent directly to us, it will be assessed together with the business concerned.

8. Your rights

To exercise your rights to access your personal data or request its correction or deletion, write to info@orderly.com.tr.

9. Contact

AISTECH YAZILIM A.Ş.
Sultan Selim Mah. Lalegül Sok. No: 7/1 Kağıthane / Istanbul
info@orderly.com.tr · +90 850 840 75 14