Privacy Policy

• Account information: email address, hashed password, store name
• Payment information: credit card details (never stored on our servers — managed securely by Stripe)
• Service data: menu items, table configurations, order history, usage logs
• Access data: IP address, browser type, access timestamps
• Browser storage: a table session ID is temporarily stored in localStorage for QR order session management (no personally identifiable information is included)

• Providing, operating, and improving the Service
• Responding to support requests
• Detecting and preventing fraudulent activity
• Processing payments and billing
• Sending service notifications such as pricing changes, Terms updates, and security alerts (by agreeing to our Terms of Service, you consent to receive these)
• Sending product updates and tips for marketing purposes (only with your separate opt-in consent; you can opt out at any time from your account settings)
• Complying with legal obligations

We do not sell or share your personal information with third parties except in the following cases:

• With your explicit consent
• As required by law
• To protect the life, body, or property of any person

We use the following third-party services, which may receive your data as necessary to operate the Service:

• Supabase Inc.: database and authentication infrastructure
• Stripe Inc.: payment processing
• Vercel Inc.: hosting and content delivery
• Resend Inc.: transactional email delivery (authentication and notification emails)
• Cloudflare Inc.: DNS and network security

The Service may store user information on servers managed by entities outside Japan to the extent necessary for service provision. We use providers that implement appropriate security measures and endeavor to protect user information.

We share information with these providers only to the extent necessary for service provision and endeavor to ensure that appropriate security measures are in place.

We use cookies and localStorage for authentication, session management, and security purposes. Disabling these in your browser may prevent some or all features of the Service from functioning properly.

• Account information (Free plan): permanently deleted immediately upon account deletion
• Account information (Paid plan): permanently deleted within 30 days after the end of the final billing period
• Order data: retained based on your plan (Free: 30 days / Standard: 1 year / Pro: unlimited)
• Access logs: retained for 90 days, then deleted
• Certain data may be retained beyond the above periods for purposes such as processing refunds, handling billing disputes, or investigating fraudulent activity.

You may request access to, correction of, or deletion of your personal data at any time. Please contact us using the details below, and we will respond within a reasonable timeframe after verifying your identity.

Please note that we may be unable to fulfill deletion requests where retention is required by law or necessary for the ongoing operation of the Service.

We may update this Privacy Policy from time to time. For significant changes, we will notify you by a method we determine. Continued use of the Service after changes constitutes acceptance of the updated policy.

PEAKEAST

2F-C, Shibuya Dogenzaka Tokyu Building, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan

Email: support@ordercome.app