Privacy Policy

1. Who We Are

PakkOrder ("we", "our", "us") is Pakistan's first automated COD order verification SaaS, accessible at pakkorder.com. We help Pakistani ecommerce merchants automatically verify Cash on Delivery orders via WhatsApp and Email before dispatch.

We are based in Karachi, Pakistan and were founded in 2026.

2. Information We Collect

We collect the following categories of personal data solely for the purpose of COD order verification:

• Buyer name — to personalise the verification message.
• Buyer phone number — to send one WhatsApp confirmation per order.
• Buyer email address — to send one Email confirmation per order.
• Delivery address — to confirm order details in the verification message.
• Order details — items, amount, and order ID provided by the merchant's store.

We do not collect payment card details, passwords, or any sensitive financial information from buyers.

3. How We Use Buyer Data

Buyer data is used for one purpose only: to send a single WhatsApp message and a single Email to the buyer asking them to confirm or cancel their COD order. We do not:

• Send marketing messages to buyers.
• Build profiles or track buyer behaviour beyond the order event.
• Use buyer data to train AI models or for any analytics beyond service delivery metrics.

4. Data Sharing

We do not sell, rent, or trade buyer data. We share data only with the following third-party service providers that are strictly necessary to operate PakkOrder:

• Meta (WhatsApp Cloud API) — to deliver the WhatsApp order confirmation message.
• Resend — to deliver the email order confirmation message.
• Google Firebase — to store order records and merchant account data securely.
• The merchant (store owner) — order confirmation and cancellation status is shared back with the merchant whose store generated the order.

Each provider processes data only as instructed and is bound by their own privacy commitments.

5. Data Retention

Buyer order data (name, phone, email, address, confirmation status) is stored on Google Firebase and automatically deleted after 90 days from the date the order was created. We do not retain buyer data after this period.

Merchant account data is retained for the duration of the active subscription and deleted within 30 days after account cancellation.

6. Data Security

• All data is transmitted over HTTPS/TLS encryption.
• Firebase security rules restrict access so each merchant can only read their own order data.
• Phone numbers are masked in server logs (e.g., +92 3XX XXXXXXX).
• We do not store payment card information — billing is handled by third-party payment processors.

7. Your Rights (Buyers)

If you are a buyer whose data was collected as part of a COD order verification, you have the right to:

• Request a copy of your personal data we hold.
• Request correction of inaccurate data.
• Request deletion of your data before the 90-day automatic expiry.

To exercise any of these rights, contact us at the details below. We will respond within 7 business days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of PakkOrder after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

For any privacy-related questions, data deletion requests, or concerns: