Effective date: September 8, 2026
This Privacy Policy explains how Orileaf handles information when you use the Orileaf customer application and related services.
When you create and use an account, we may collect your name, email address, phone number, delivery address, order details, refund/wallet information, payment transaction identifiers, and authentication/session information. The app may also use a Firebase Cloud Messaging device token to deliver notifications.
We use this information to create and secure your account, process orders and payments, provide delivery and customer support, manage refunds, send relevant service/product notifications, prevent fraud and abuse, and maintain necessary transaction records.
Online payments are processed through Cashfree Payments. Orileaf does not store your full card credentials. Payment transaction identifiers and related order information may be retained to verify and reconcile transactions.
If you allow notifications, Firebase Cloud Messaging may provide a device token so Orileaf can send service and product notifications. You can disable notifications in your device settings.
We use authenticated API sessions and HTTPS for data in transit. Access to account information is restricted to the functions required to operate the service.
You may request deletion of your Orileaf account and associated personal data from inside the app or through our Account Deletion page. On deletion, account credentials, saved customer state, device tokens and other directly associated personal data are removed. Historical order records may be retained in anonymized form where necessary for accounting, fraud prevention, dispute handling, security or legal compliance.
Service providers such as Cashfree Payments and Firebase may process information needed for payments and notifications. Their processing is subject to their own privacy terms.
Orileaf is not directed to children under the applicable age of digital consent, and we do not knowingly request unnecessary personal information from children.
For account deletion requests, use the Account Deletion page.