Privacy Policy

Last updated: July 2026 · In line with Israel's Privacy Protection Law (1981) and Amendment 13 (effective August 2025) | OrdexAI — Operated by Lishai Shimon Ben Shoshan

1. What is OrdexAI and who this policy applies to

OrdexAI is a B2B WhatsApp-based order management system for food distributors. The system enables a distributor's business customers to send orders in free-form language — text, voice, or photos — directly via WhatsApp, which are then processed automatically using AI.

This policy applies to:

• Distributors — businesses that sign up to OrdexAI and use the system to receive orders.
• Distributor's customers — businesses that place orders via WhatsApp.
• Order page users — anyone accessing the online ordering page at order.ordexai.com.
• Site visitors — anyone browsing the marketing site ordexai.com or submitting the "Contact" form.

2. Data we collect and process

3. Cookies & tracking

The OrdexAI website uses no advertising cookies, pixels, or tracking tools (such as Google Analytics or Meta Pixel). We use localStorage only for functional purposes — for example, saving accessibility preferences. The order page uses a signed token embedded in the link, solely to authorise the order. Some site pages load display fonts from Google Fonts, so your IP address may be exposed to Google when the page loads.

4. How the system processes orders

When a customer sends an order:

• Text: The message content is sent to Claude (Anthropic) for natural language processing and extraction of items and quantities.
• Voice: The audio file is sent to Soniox for Hebrew transcription, after which the transcribed text is processed like a text order. The original audio file is not retained.
• Photo / Form: The image is sent to Azure Document Intelligence for OCR text extraction, after which the text is processed like a text order. The original image is not retained.
• Confirmed order results are stored in the database and compiled into a daily PDF picking list sent to the distributor via WhatsApp and email.

5. Data sharing with third parties

We do not sell personal data or use it for advertising. Marketing content is sent only if you gave explicit, separate consent, which is revocable at any time.

Some of the providers above (e.g., Anthropic, Soniox, FormSubmit, and Google) operate outside Israel and the EU, so data may be processed in the USA. We rely only on recognised, reputable providers.

6. Data storage and retention

• Order data is retained for ongoing operations and system improvement.
• Audio files and images are not retained — processed and deleted.
• Picking list PDFs are generated in-memory and are not stored on servers.
• The database is hosted on AWS in the EU (Frankfurt) region and protected with encryption.

7. Data security

We implement security measures including: encrypted communications (HTTPS/TLS), HMAC verification on all WhatsApp messages, per-organization access controls (Row-Level Security), and API keys protected via AWS SSM. No system is 100% secure.

8. Your rights

• To review the data stored about you.
• To request correction or deletion of your data.
• Opt-out: Reply "STOP" (or "הסר") to any WhatsApp message, or email info@ordexai.com.
• Distributor customers may also contact their distributor directly regarding their data.

9. Changes to this policy

OrdexAI reserves the right to update this policy. Material changes will be posted on the website and will take effect 14 days after publication.

10. Contact us