Operator & Grievance Officer
OrderBhejo is operated by Idea Intelligence (Sole Proprietorship).
GSTIN: 08ETSPK4214D1ZM
Registered address: Rota, Jalore, Rajasthan – 343029, India
Grievance Officer: Ajay Kumar, Idea Intelligence
Email: hello@orderbhejo.in · WhatsApp: +91 77372 72365
Support hours: Monday – Saturday, 9:00 AM – 8:00 PM IST
We acknowledge every grievance within 24 hours and aim to resolve it within 15 days of receipt, as required under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
1. Infrastructure & Encryption
OrderBhejo runs on Supabase, a managed cloud platform, in Mumbai, India (ap-south-1). All traffic between your device and our servers is encrypted in transit using TLS, and data is encrypted at rest by Supabase.
To be precise about what this does not mean: messages are not end-to-end encrypted. They are encrypted in transit and at rest, and our servers can read message content in order to deliver, sync and back it up.
Our infrastructure provider, Supabase, maintains SOC 2 Type II and ISO 27001 certification for the platform it operates, and hosts on AWS data centres. Those certifications belong to Supabase and cover the infrastructure OrderBhejo runs on — they are not certifications of OrderBhejo itself, and we do not claim them as ours.
2. Database Row Level Security (RLS)
We enforce Row Level Security on every database table, so the database itself — not just the app — decides which rows a request may read or write. Each request carries a signed token identifying the account, and policies are written so one account cannot read or alter another's messages, products or orders.
3. Multi-Device Authentication & Session Revocation
Pairing OrderBhejo Web requires you to scan a QR code with your phone, and the pairing code it carries is single-use and short-lived. Your phone stays in control: the Linked Devices screen lists every session with its device name, platform and when it was last active, and you can revoke any of them, which ends that session. We do not show IP addresses.
4. Backups
Backups of the database are taken and retained by Supabase as part of the managed platform we run on. Separately, and under your own control, you can export a copy of your chat history to your own Google Drive from the app at any time — that copy is yours, and it sits in your Google account rather than ours.