What LaiOrder keeps, and where

Who we are

LaiOrder is made by Abelitie (SSM 201503040841, IP0425426-T), 32000 Sitiawan, Perak, Malaysia. “We” and “us” on this page mean Abelitie. We handle personal data under Malaysia's Personal Data Protection Act 2010.

This website, laiorder.com

• No cookies, no analytics, no advertising and no tracking scripts.
• If you switch to the dark theme, your browser remembers that choice on your own device (in its local storage). It never comes to us.
• The site is hosted by Vercel. Like any web host, its servers record each request (the address of your connection, your browser, the page and the time) to deliver the site and keep it secure. Our domain's DNS runs on Cloudflare.
• The fonts are served from this site, so your browser makes no request to Google Fonts.
• The form on the Contact page only writes a WhatsApp message for you. It sends nothing to us; you choose whether to send it in WhatsApp.

When you message us

If you WhatsApp or email us, we receive what you send: usually your name, your number or email address, and your cafe's details. We use it to reply and, if you become a customer, to set up and bill your account. WhatsApp is run by Meta under its own privacy policy.

Your cafe's records stay on your PC

The LaiOrder app runs on your cafe's Windows PC. Every order and receipt, your daily sales, your menu and its photos, your settings, PINs and the tablets that joined are saved on that PC (in C:\LaiOrder), with a copy to your USB drive. They are never sent to us. Receipts are business records, so the app keeps them for seven years.

Your cafe decides what happens to those records, and is responsible for them under the law. LaiOrder keeps no customer phone numbers anywhere.

Your customers' phones

When a customer scans the card on a table, their phone opens your menu at your cafe's own address, such as democafe.laiorder.com. That connection travels through Cloudflare's network straight to the PC in your cafe. We don't store it, and customers don't sign in or give a phone number to order.

Signing in (app.laiorder.com)

A cafe on PAID signs in once from its Studio PC, with Google. To tell that PC your cafe is on PAID, our sign-in service keeps only:

• the Google account you sign in with: its email address and name;
• your plan, and the date it's paid until;
• your one Studio PC: its name and a random id, and when it last checked in;
• a scrambled copy (a hash) of the key your PC uses to renew, and the signed licence it renews every hour;
• records of your payments (date, amount and reference), which we keep as business records for as long as Malaysian law requires.

It never receives an order, a receipt, a sale or your menu. The sign-in service runs on Google's cloud (Firebase); Google sign-in is covered by Google's privacy policy.

Who else sees data

We don't sell or rent personal data, and we don't use it for advertising. The services we rely on handle it for us: Vercel (this website), Cloudflare (DNS and the connection to your cafe's PC) and Google (sign-in and the account records above). We would share data with anyone else only if the law required it.

Your choices and rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete your account. When an account is closed we delete its sign-in data, except payment records we must keep by law. Your cafe's records on its PC are yours: you can keep, export or delete them there at any time.

To ask, WhatsApp us or email us: Show email address

Changes

If we change what we keep, we'll update this page and its date at the top. If the change matters to how your account works, we'll tell you before it takes effect.