Privacy Policy
Last updated: May 20, 2026
Aeonx Digital Solution built OrderX as an opensource platform. This SERVICE is provided by Aeonx Digital Solution at no cost and is intended for use as is.
This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service.
If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.
The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which are accessible at OrderX unless otherwise defined in this Privacy Policy.
How OrderX Uses Google User Data
OrderX accesses certain Google user data through Google APIs when you choose to sign in with Google. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
1. Data We Access
When you authorize OrderX to sign in with your Google account, we request the following Google OAuth scopes and access only the data described:
| Scope | Data accessed |
|---|---|
| openid | Your unique Google account identifier, used to verify your identity. |
| https://www.googleapis.com/auth/userinfo.email | Your primary Google account email address. |
| https://www.googleapis.com/auth/userinfo.profile | Your name and profile picture URL as configured in your Google account. |
OrderX requests only these minimum scopes required to deliver Sign-in with Google. We do not request access to Gmail, Google Drive, Google Calendar, Google Contacts, Google Sheets, or any other Google service, and we never access Google user data beyond what these scopes allow.
2. How We Use This Data
We use the Google user data we access strictly for the following purposes:
- Authentication. Your Google account ID and email address identify your OrderX account and let you sign in using Single Sign-On (SSO).
- Account profile. Your name and profile picture are displayed inside OrderX so you and your teammates can identify your account.
We do not use Google user data for advertising, we do not sell Google user data, and we do not use Google user data to train generalized or third-party AI/ML models. Any human access to Google user data is limited to (a) you, (b) with your explicit consent, (c) for security or to comply with applicable law, or (d) for internal operations only when the data is aggregated and anonymized.
3. How We Share This Data
We do not share Google user data with third parties except in the following limited cases:
- Sub-processors that operate our service. We use cloud infrastructure providers (such as AWS for hosting and Google Firebase for push notifications and crash reporting) that process data only on our instructions and are bound by data-protection agreements.
- Legal compliance. If required by valid legal process, we may disclose information to the extent required by law.
We do not sell, rent, or trade Google user data to anyone.
4. How We Store and Protect This Data
- Encryption in transit: all traffic between you, Google, and OrderX is protected with TLS 1.2 or higher.
- Encryption at rest: OAuth tokens and any cached Google user data are stored encrypted (AES-256) in our production database.
- Access controls: access to production systems is restricted to authorized engineers using multi-factor authentication, and all access is logged and audited.
- Tokens: we store refresh tokens only as long as needed to maintain your active session and revoke them immediately when you disconnect Google or delete your OrderX account.
5. Data Retention and Deletion
We retain Google user data only for as long as your OrderX account remains active and the data is needed to provide the features you authorized.
- You can revoke OrderX’s access to your Google account at any time at https://myaccount.google.com/permissions. Once you revoke access, OrderX deletes the associated tokens and cached Google user data within 30 days.
- You can request deletion of all data we hold about you by emailing sales@aeonx.digital or by using the “Delete Account” action inside the OrderX application. We will delete or anonymize all Google user data within 30 days of a verified request, except where retention is required by law (e.g. tax or accounting records).
Information Collection and Use
For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information. The information that we request will be retained by us and used as described in this privacy policy.
The web-app does use third-party services that may collect information used to identify you.
Log Data
We want to inform you that whenever you use our Service, in a case of an error in the web-app we collect data and information (through third-party products) on your device called Log Data. This Log Data may include information such as your device Internet Protocol ("IP") address, device name, operating system version, the configuration of the web-app when utilizing our Service, the time and date of your use of the Service, and other statistics.
Cookies
Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.
This Service does not use these "cookies" explicitly. However, the web-app may use third-party code and libraries that use "cookies" to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.
Service Providers
We may employ third-party companies and individuals due to the following reasons:
- To facilitate our Service
- To provide the Service on our behalf
- To perform Service-related services
- To assist us in analyzing how our Service is used
We want to inform users of this Service that these third parties have access to their Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.
Security
We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.
Links to Other Sites
This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Children's Privacy
These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13 years of age. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do the necessary actions.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.
This policy is effective as of 2026-05-20
Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at sales@aeonx.digital.