Legal

Privacy Policy

Last updated: 2026

The short version

Your shop belongs to you. We don't sell your data or your customers' data. Customers never need to create an account to place an order or send a request — we only collect what's needed to fulfill that order or request.

What we collect from sellers

When you create an OlaOrder account, we collect your name, email address, and password (handled securely through our authentication provider, Supabase — we never see or store your password in plain text). You may optionally provide a phone number. We also store the shop details you enter: your shop name, description, contact information, offerings, and pricing.

What we collect from your customers

When a customer places an order, sends a service request, or asks a question through your shop, we collect the name and phone number they provide, along with the details of what they're asking, ordering, or requesting (and, for service requests and questions, an optional budget or reference photos, if they choose to include them). Customers are never asked to create an account, and we never collect a password from them. A customer may optionally provide an email address if they'd like automatic updates when an order or request's status changes — this is always optional, never required.

How we use this data

We use seller data to operate your account and shop, and to send you email notifications when a new order, request, or question comes in. We use customer data to deliver their order, request, or question to you, the seller; to let them check their own order or request status later using their reference number and phone number; and — only if they provided an email — to send them a status update when you change an order or request's status. We do not use customer data for marketing, and we do not share it with anyone outside of what's needed to run your shop.

Where data is stored

OlaOrder is built on Supabase, a hosted database and authentication provider. Your data is stored in Supabase's infrastructure under the same security practices (encryption in transit, access controls) that Supabase provides to every customer on its platform.

Data sharing

We do not sell seller or customer data to third parties. We do not share your shop's data with other sellers. Your shop's public page shows only what you choose to publish — your offerings, prices, and shop details — never any private account information.

Your choices

You can update or delete your shop and offerings at any time from your dashboard. If you'd like your seller account and all associated data fully deleted, contact us at the email below and we'll process that request.

Changes to this policy

If this policy changes in any meaningful way, we'll update the date at the top of this page.

Contact

Questions about this policy? Reach us at support@afolaola.com. For security-related concerns, contact security@afolaola.com.