INTERIM POLICY — Last updated 2026-06-18. This Privacy Policy is currently under legal review. A finalized version will be published following attorney review. For questions contact legal@drivensoftwaresolutions.com.

OrderFriendly — Privacy Policy

Effective: 2026-06-18 (interim) Last reviewed: 2026-06-18

OrderFriendly ("the Service") is operated by Driven Software Solutions, LLC ("Driven", "we", "us", "our"), a Georgia limited-liability company located at Lilburn, GA 30047, USA.

OrderFriendly is an online-ordering platform used by restaurants and their customers. This Privacy Policy describes how we collect, use, share, and protect personal information when you visit orderfriendly.com, place an order through a restaurant powered by OrderFriendly, or administer an OrderFriendly account on behalf of a restaurant.

Contact: legal@drivensoftwaresolutions.com · support@drivensoftwaresolutions.com.

---

1. Roles: controller vs. processor

• For information about a restaurant customer ("Restaurant Customer") that subscribes to OrderFriendly, Driven is the controller.
• For information collected from a restaurant's diners when they order through an OrderFriendly-powered storefront ("Diner Data"), Driven is the processor / service provider on behalf of the Restaurant Customer, which is the controller / business.

2. Information we collect

2.1 From Restaurant Customers

• Account info: business name, owner name, email, phone, billing address.
• Authentication: password (hashed), MFA tokens.
• Billing: payment-method tokens via Stripe (we do not store raw card numbers).

2.2 From Diners (on behalf of Restaurant Customers)

• Name, email, phone.
• Delivery / pickup address, special instructions.
• Order items, modifiers, dietary preferences when provided.
• Payment information (tokenized via the restaurant's payment processor — Clover, Square, Stripe; we do not store full PANs).
• Device data: IP address, browser/app, language, timestamps.

2.3 From everyone (automatically)

• Cookies and similar technologies — see our Cookie Policy.
• Crash reports and server logs.

3. How we use information

We use personal information to:

• Place, route, and fulfill orders.
• Process payments and detect fraud.
• Communicate about your order (order updates, receipt, refund).
• Provide and improve the Service.
• Comply with legal obligations.
• Detect, prevent, and respond to abuse and fraud.

We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising.

Marketing emails to Diners from a Restaurant Customer are sent under the Restaurant Customer's name and authority; the Restaurant Customer is responsible for obtaining valid CAN-SPAM / CASL consent.

4. Sub-processors

Recipient	Purpose	Location
Amazon Web Services (AWS)	Hosting, storage	United States
Heroku	Hosting	United States
MongoDB Atlas	Database (subset)	United States
Stripe	Subscription billing for Restaurant Customers	United States
Twilio	SMS notifications (where enabled)	United States
Hostinger	Marketing site	United States / EU
Clover, Square, Stripe	Diner-payment processing (per restaurant configuration)	United States
Email / transactional email vendor	Transactional emails	United States

We may disclose information to comply with legal process, protect rights or safety, or in connection with a merger, acquisition, or sale.

5. Where data is stored

OrderFriendly stores data in the United States.

6. Data retention

• Order records: retained for 7 years (financial records).
• Diner contact records: retained per the Restaurant Customer's instructions, plus 90 days after the Restaurant Customer terminates the OrderFriendly account.
• Restaurant Customer account: retained for the life of the subscription plus 90 days after termination.
• Encrypted backups: up to 90 days.

7. Cookies

See our Cookie Policy.

8. Security

• TLS 1.2+ in transit; AES-256 at rest.
• Tokenized card data via certified PCI-DSS payment processors.
• Access controls, audit logging, vulnerability scans.

Report security issues: security@drivensoftwaresolutions.com.

9. California rights (CCPA / CPRA)

California residents have rights to know, access, correct, delete, limit use of sensitive personal information, and opt out of sale or sharing (Driven does not sell or share). Submit requests to privacy@drivensoftwaresolutions.com.

10. Other US state rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, and Minnesota have similar rights — submit requests to privacy@drivensoftwaresolutions.com.

11. International users

OrderFriendly is operated from the United States. Using the Service indicates your understanding that information will be processed in the United States.

12. Children

OrderFriendly is not directed to children under 16. We do not knowingly collect personal information from children under 16.

13. Changes

Material updates will be posted at this URL with a new "Effective" date.

14. Contact

Driven Software Solutions, LLC Lilburn, GA 30047, United States legal@drivensoftwaresolutions.com