Delete your OrderLah account

This is where an OrderLah merchant asks for their OrderLah account — and the data held against it — to be deleted. You do not need the app installed and you do not need to be signed in. The same request is in the app and in the merchant portal for anybody who is; this page is for when neither is to hand.

Ask for it to be deleted

Type the email address you sign in to OrderLah with. We email you a link to confirm it, because an address typed into a public page is not proof that it is yours.

Signed up with Sign in with Apple and chose to hide your email? Your OrderLah address is the one ending in @privaterelay.appleid.com. On an iPhone or iPad it is under Settings → your name → Sign in with Apple → OrderLah, and the link comes to your own inbox through Apple.

Your OrderLah email address Email Me the Deletion Link ✉️

We answer exactly the same way whether or not that address has an OrderLah account — whether somebody has one is not something we will tell a stranger who types it in. So if no email arrives, check the address for a typo and ask again rather than reading the message on screen as confirmation that it worked.

What happens after you ask

1. We email a confirmation link to that address. It is good for 2 hours, and nothing at all is scheduled until it is used — a link nobody opens simply expires.
2. You confirm, and the account is deleted 30 days later. Nothing is destroyed during those 30 days.
3. Changed your mind? Sign back in to OrderLah before the 30 days are up — the merchant portal or the app, either one — and the deletion stops on its own. You do not have to press anything. The email we send when the clock starts also carries a link that stops it in one press.

What happens to your businesses

An OrderLah account is a person, and a business can have more than one person in it. So deleting your account is never allowed to mean deleting the shop a colleague is standing in, and equally it must not leave a business trading that nobody owns.

• A business you are the only owner of is closed along with your account. Its outlets close with it and its tablets stop working — a paired device is authorised by the outlet, and there is no outlet left to authorise it.
• A business somebody else owns carries on. You are removed from it and nothing else about it changes; the other owner's shop keeps trading and their devices keep working.

If you are signed in, the app and the merchant portal both list which of your businesses fall on which side of that line before you confirm anything.

What is kept afterwards, and why

These records outlive the account, and they are named rather than hidden:

• Tax invoices for licences bought from OrderLah. An invoice is an accounting record on both sides, and a record that can be withdrawn by one of them is not one.
• Which OrderLah terms and privacy notice were agreed to, and when — with the network address and the app or browser it was agreed from. That row is the evidence that the agreement happened; deleting it would not undo the agreement, only the proof of what it said.
• The security audit log — what was done to the account and from what network address. It exists to answer “was this account misused?”, which is a question that is usually asked after the fact.
• A business you were the only owner of is closed, not erased. The business, its registered details and its outlets with their addresses stay on file, marked closed, because a tax invoice that names a business is not a record if that business can be made to disappear.
• Which tablets were authorised to a closed outlet, and when — including the device names your staff typed and the last network address each was seen at. Those authorisations are revoked, so the tablets cannot sign in again.
• Which country a closed outlet was billed in. The live location readings that produced that decision are deleted; the decision itself stays because billing changes point at it.
• Your licences and their history — trials, purchases, reminders, and each time a tablet checked its licence, with the network address it checked from. The tax invoices above are drawn from these.
• Records of online payments customers made to a closed outlet, as the payment provider reported them. These can include the card brand, the last four digits and the name of the person who paid, and they are the record of money that moved. Your own payment provider keys are erased and the connection is switched off.
• Orders, menus and tables kept on our servers, for a closed outlet that took orders through OrderLah’s servers rather than a Hub tablet.
• The costs, expenses and budgets entered on the merchant portal’s Finance pages. You can erase them there, in one step, before you delete your account.
• Referral and reward records — your referral code and the contact details given with it, who you referred, and the rewards and payouts recorded, including the account holder’s name on a payout already sent. The bank details you entered for payouts are erased, unless a payout to them is still on its way: money in flight is followed up until it arrives or comes back, and those details are what it was sent to.
• The sales enquiry and website visits from before you signed up, including the name, phone number and email address given with an enquiry.

What a closed business leaves that nobody will use again is taken away rather than kept: the staff names, roles and shop address its Hub last published to OrderLah, how far its setup got, its payment provider keys, and the bank details entered for referral payouts.

The record of the deletion itself is kept for one year: a request id, a one-way digest of the email address, the timestamps, and the network address the request came from. The email address itself is held only while the request is live and is blanked when it completes, so afterwards the record can confirm that a deletion happened without anybody being able to read whose it was.

This does not touch your tablet

OrderLah's shop data is local. Your menu, your orders, your takings, your staff list and your backups are on your own devices, so deleting your OrderLah account does not erase your till and cannot. The only records of your shop's trade on our side are the ones named above — online payments, and the orders of an outlet that took them through our servers.

To clear the tablet as well, uninstall the app or clear its data in the tablet's own settings — that removes the local database, its encryption key and its backups. Do that after exporting anything you still want, because there is no copy anywhere else. Privacy says what lives where.

If you cannot use the form

Email hello@orderlah.app from the address you sign in with and ask for your account to be deleted. It reaches the same people and ends in the same place — the confirmation link, the 30 days, and the same list above of what is closed and what is kept.