PasaOrder
Privacy Policy
This policy explains how PasaOrder handles information when store owners manage a catalog and orders, and when customers place an order or message a store.
Last updated October 12, 2026
Information we handle
Depending on how you use PasaOrder, information may include account name and email, authentication identifiers, store name and settings, catalog text and images, customer names and contact details, delivery addresses, table numbers, order contents, payment status, and messages sent to a store through its public chat or connected Facebook Page.
We also receive technical information needed to operate and protect the service, such as request, device, and diagnostic data. When an owner connects a Facebook Page, Meta provides Page and messaging information needed to receive and reply to messages. Meta may provide a customer profile name when available.
How information is used
- To create accounts and authenticate store owners.
- To publish menus, accept customer orders, and help stores manage them.
- To deliver Messenger messages and owner-initiated replies.
- To sort conversations into review queues and, when an owner reviews a chat and Gemini is configured, prepare an editable order draft.
- To maintain, troubleshoot, secure, and improve PasaOrder.
- To respond to support, privacy, and legal requests.
AI-assisted conversation review
PasaOrder uses a conversation classifier to help sort chats. When a store owner opens or retries an eligible conversation for order review, the conversation text and relevant store catalog context may be sent to Google Gemini to prepare a structured draft. Gemini is not the source of truth for products, prices, or availability. PasaOrder checks draft items against the store catalog, and the owner reviews and confirms any order. We do not use this feature to automatically place an order or send an AI reply to a customer.
Store owners should avoid sending sensitive personal information in chats unless it is needed to handle the order. AI-generated drafts can be incomplete or incorrect and must be checked by the store.
When information is shared
We share information only as needed to provide the service, at the store owner's direction, or as required by law. Service providers may process data for hosting, database operations, image storage and delivery, authentication, AI-assisted review, and communications. Facebook/Meta processes information when a store connects its Page; Google processes conversation context when Gemini order extraction is used. Those providers handle data under their own terms and privacy notices.
A store owner controls the store's catalog and order workflow and decides how to respond to its customers. Customers who order from a store should also review that store's privacy information for how it uses customer details outside PasaOrder.
Storage, security, and retention
We use technical and organizational safeguards intended to protect information, but no online service can promise absolute security. We keep information while it is needed to operate the account, fulfill and document orders, meet legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by record type. When information is no longer needed, we intend to delete or de-identify it where practicable, subject to legal and operational requirements.
Your choices and privacy rights
You may ask to access or correct personal information, object to or restrict certain processing, request deletion or blocking where applicable, or raise a privacy concern. Contact the PasaOrder operator using the address above. We may need to verify your identity and may retain information that we are legally required or otherwise permitted to keep.
Under Philippine law, data subjects have rights that include being informed, access, correction, objection, erasure or blocking in applicable cases, and filing a complaint with the National Privacy Commission. The specific rights and exceptions depend on the circumstances. See the National Privacy Commission's data subject rights guide.
Children and third-party services
PasaOrder is intended for store owners and customers placing ordinary store orders, not for children to create accounts. We do not knowingly seek to collect children's personal information for account creation.
Links and integrations to Meta, Google, and other services are subject to those services' own privacy practices. This policy does not cover services we do not operate.
Changes and contact
We may update this policy as PasaOrder changes. We will revise the date above when we publish a new version. Questions or requests can be sent to [email protected].
Before public launch, replace the contact-email placeholder with an address you monitor. These pages are a product draft, not legal advice; have the final policies reviewed for your business and applicable law.