Privacy Policy

When you use GetNextOrder, we collect information necessary to operate the service:

• Account email address and authentication credentials
• Billing information processed through our payment provider
• Message metadata such as delivery status, timestamps, message type, and country — not message body content
• Recipient phone numbers stored as hashed values only (SHA-256); we do not store plaintext recipient numbers
• API usage data including request timestamps and credit consumption

We use your data to:

• Provide, maintain, and improve the messaging API service
• Process subscription payments and marketing wallet top-ups
• Send transactional emails such as payment confirmations and alerts
• Monitor platform security and prevent abuse
• Comply with legal obligations

We do not sell your personal data to third parties.

Application data is stored in Supabase (PostgreSQL) in the EU region. Payment card details are handled exclusively by Stripe — we never store full card numbers on our servers.

WhatsApp access tokens you provide are encrypted at rest using AES-256-GCM before storage.

Message logs are retained for 90 days, after which metadata is deleted or anonymised. Account data is kept for as long as your account is active and until you request deletion.

Billing records may be retained longer where required for tax, accounting, or legal compliance.

If you are located in the European Economic Area or United Kingdom, you have rights under GDPR including:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to or restrict certain processing

To exercise any of these rights, email support@getnextorder.com. We will respond within 30 days.

We share data with trusted processors only as needed to operate the service:

• Meta — message delivery via WhatsApp Business Platform
• Stripe — payment processing
• Resend — transactional email
• Vercel — application hosting
• Supabase — database and authentication

Each processor operates under their own privacy policies and, where applicable, data processing agreements.

Data protection enquiries: support@getnextorder.com

GetNextOrder Ltd, registered in England and Wales (Company No. 17174887).