Privacy
Last updated 10 September 2026.
Cambusa is run by a sole operator based in Sydney, Australia. This page explains, in plain terms, what information Cambusa collects and what happens to it. Cambusa handles personal information in line with the Australian Privacy Principles under the Privacy Act 1988.
What is collected
- Details you send through this website. Your name, venue name, role, city, email address, optional phone number, and the number of suppliers you order from.
- Your account in the app. You sign in with Google, so Cambusa receives your name and email address from Google. Cambusa never sees your Google password. Your account is linked to a venue, which you join using that venue's code, and carries a role of admin, manager or staff.
- The information you put into the app. Your product list, your locations, supplier names and contact details, stock levels and PAR levels, the prices held against your products, and every order you send.
- Basic usage records. When your account was created, when it last signed in, and which user sent which order, so your venue's order history shows who did what.
What it is used for
To set up and run your venue in Cambusa, to generate and send your supplier orders, to reply to you, and to handle billing if you become a paying customer. Nothing else.
Who can see what, inside your venue
Your data belongs to your venue, not to individual accounts. Spend and analytics are visible to admins and managers only; staff accounts can count and order but cannot see those figures. Order history shows the name of the person who sent each order.
What is not done with it
Your information is not sold, rented, or shared with advertisers. Your product lists, prices and supplier relationships are not shared with other venues, and are not passed to suppliers other than the orders you yourself choose to send.
Who else is involved
Cambusa relies on a small number of service providers to operate, and your information may be stored or processed by them:
- Replit — hosts the application at apporder.app and its database.
- Google — provides sign-in.
- Netlify — hosts this website and receives the details submitted through the form above.
- Stripe — processes payments if you subscribe. Card details go directly to Stripe and are never seen or stored by Cambusa.
Some of these providers store data on servers outside Australia.
When you send an order
Orders leave Cambusa through WhatsApp or email, using your own device and your own accounts. Once an order is sent, the contents of that message are handled by WhatsApp or your email provider under their own terms.
How long it is kept
Your account and order history are kept for as long as your venue uses Cambusa. If you ask for your account to be closed, your data is deleted within 30 days, except where a record must be kept for tax or accounting purposes.
Your choices
You can ask at any time to see the information held about you, to have it corrected, or to have your account and its data deleted. Write to order.app.help@gmail.com and you will get a reply within a few days.
Cookies
This website does not use tracking or advertising cookies. The app uses a single sign-in cookie so that you stay logged in between visits.
Changes
If this page changes in a way that affects how your information is handled, existing customers will be told by email before it takes effect.
Contact
Questions or complaints about privacy: order.app.help@gmail.com. If you are not satisfied with the response, you can contact the Office of the Australian Information Commissioner.