Privacy Policy

What We Collect

• Business information: name, license number, BioTrack ID, address
• Contact info: email, phone number (used for order notifications)
• License verification documents (stored securely, admin-only access)
• Transaction data: orders placed, inventory movements
• Payment info: handled entirely by our PCI-compliant payment processor — we never store card numbers or bank credentials

How We Use It

• To verify your license and approve your account
• To process orders, route deliveries, and generate compliant transfer manifests
• To send you notifications about your orders and account
• To detect fraud and enforce platform rules

Who We Share It With

We share the minimum necessary information with:

• Our payment processor (for transactions you initiate)
• Couriers assigned to your deliveries (only delivery address + contact)
• Counterparties in transactions you voluntarily enter (seller sees buyer, buyer sees seller)
• Law enforcement or regulators if legally required

We never sell your data. The information above is shared only for operational and transactional purposes (compliance, payment, and fulfillment of orders you initiate) — never for marketing or promotional purposes. Your mobile phone number and SMS/messaging consent are never shared with any third parties or affiliates for marketing or promotional purposes (see the SMS / Text Messaging section below).

SMS / Text Messaging

If you opt in to SMS notifications, we send recurring account and order notification text messages (order updates, delivery alerts, counterparty trade offers within the operator network, and partnership requests) to the mobile number you provide. These are transactional, account-related messages tied to activity in your account — not advertising.

• Message frequency varies based on your account activity.
• Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.
• We do not share, sell, or otherwise provide your mobile phone number or messaging consent information to any third parties or affiliates for marketing or promotional purposes. Mobile opt-in data is not shared with third parties for any purpose other than delivering the messages you requested.

Data Retention

Business records are retained per New Mexico compliance requirements. You can request deletion of non-required data by emailing info@orqestrax.com.

Security

All data is encrypted in transit (TLS) and at rest. License documents live in private storage accessible only by authorized admins via signed URLs. Passwords are hashed; we never see them.

Your Rights

You can access, correct, or delete your personal information at any time from your Settings page. For data requests or questions, contact info@orqestrax.com.

Contact

Privacy questions: info@orqestrax.com