Privacy Policy

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Site includes:

a. Personal Data

Personally identifiable information, such as your name, shipping address, email address, and telephone number, and demographic information, such as your age, gender, hometown, and interests, that you voluntarily give to us when you register with OrderNest or when you choose to participate in various activities related to OrderNest.

b. Derivative Data

Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.

c. Financial Data

Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services from the Site.

d. Mobile Device Data

Device information, such as your mobile device ID, model, and manufacturer, and information about the location of your device, if you access the Site from a mobile device.

2. Face Data and Attendance Verification

OrderNest Payroll uses face data only to verify an employee's identity when the employee clocks in or clocks out. The camera captures a face image on the employee's device or on an employer-managed kiosk. The app converts the detected face into a 128-value numerical face template on the device. The template is used only for identity matching during attendance workflows.

a. Face Data We Collect

We collect up to three enrollment face photographs and their numerical face templates when an employer enrolls an employee for face verification. At clock-in or clock-out, we temporarily process a new face photograph and numerical face template. We also record the verification result, match confidence, time, store, attendance status, and, for mobile self check-in, the device location used to enforce the employer's geofence.

b. How We Use Face Data

We use enrollment templates only to compare an employee's clock-in or clock-out scan with the employee profiles authorized for that store. For mobile self check-in, the comparison is one-to-one with the selected employee. For a shared kiosk, the comparison is against the active employees assigned to that store. A successful or review-required match may create an attendance record. A rejected scan does not create an attendance record or store its photograph or temporary template. We do not use face data for advertising, marketing, profiling, surveillance, or any purpose unrelated to attendance verification.

c. Storage, Disclosure, and Security

Numerical enrollment templates and attendance metadata are stored in our private MongoDB Atlas database. Enrollment photographs and photographs attached to accepted or review-required attendance punches are stored in a private Cloudflare R2 bucket. The bucket is not publicly accessible. Authorized managers can view a punch photograph only through a short-lived signed link. Raw numerical face templates are used only by OrderNest's server-side matching service and are not returned to app users.

We disclose face data only to MongoDB Atlas and Cloudflare R2 as infrastructure processors acting on our instructions to host and secure the service. We do not sell face data, license it, share it with advertisers or data brokers, or permit these processors to use it for their own purposes.

d. Retention and Deletion

The temporary numerical template created for a clock-in or clock-out comparison is processed in memory and discarded immediately after the comparison. A rejected scan's photograph is also discarded and is not uploaded.

Enrollment face photographs and templates are retained while the employee's face enrollment remains active. They are deleted from active systems when an authorized manager clears the enrollment, deletes the employee profile, or the customer closes the OrderNest account. Photographs associated with accepted or review-required punches are retained with the employer's attendance record so the employer can review and resolve payroll disputes. They are deleted when the employer deletes the related attendance record or closes its OrderNest account. A verified deletion request sent to [email protected] is completed in active systems within 30 days; residual encrypted backups expire within an additional 30 days, unless retention is required by law.

Employees can ask their employer's authorized OrderNest manager to clear face enrollment or delete the relevant record. Employees and customers may also request access or deletion by contacting [email protected].

3. Use of Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

• Create and manage your account.
• Process your transactions and send you related information.
• Manage your orders and provide customer service.
• Send you technical notices, updates, security alerts, and support and administrative messages.
• Respond to your comments, questions, and requests.
• Monitor and analyze trends, usage, and activities in connection with our services.
• Personalize and improve the Site and provide advertisements, content, or features that match user profiles or interests.
• Facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards.

4. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

a. By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

b. Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.

c. Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable.

6. Policy for Children

We do not knowingly solicit information from or market to children under the age of 13. If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible.

7. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.

8. Options Regarding Your Information

You may at any time review or change the information in your account or terminate your account by:

• Logging into your account settings and updating your account.
• Contacting us using the contact information provided below.
• Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: