Privacy Notice

1. Who we are

Ordamo ("Ordamo", "we", "us") is operated by Marat Murzakhanov, registered at Juramento 3939, CABA, Argentina, registration number CUIT 20965036505.

Contact: marat@ordamo.app

2. Two different roles — please read this first

This matters for understanding the rest of this notice.

We are the controller of data about you, our customer: your name, email, account settings, billing information, and how you use the Service.

We are a processor of the data you upload about other people — your customers, suppliers and staff. You decide what to upload, why, and for how long. You are the controller of that data. We process it only to provide the Service to you, on your instructions.

If you need a Data Processing Agreement, email marat@ordamo.app and we will provide one.

3. What we collect about you

You give us:

• Name and email address
• Company or brand name
• Account settings, including your logo, branding, terms text and payment instructions
• Billing details (processed by our payment provider — we never receive your full card number)
• Anything you send us in support messages

We collect automatically:

• Log and device data: IP address, browser and device type, pages viewed, timestamps
• Product usage: which features you use and when, to understand what works and to diagnose problems
• Cookies and similar technologies — see section 9

We do not:

• Sell your data
• Sell or share Your Content with advertisers
• Use Your Content to train AI models for other customers or for our own general models

4. What you upload about other people

Depending on how you use the Service, this may include your customers' names, phone numbers, email addresses, delivery addresses and tax identifiers; your suppliers' details; order, payment and pricing information.

We process it solely to operate the Service for you: storing it, displaying it back to you, generating documents and customer-facing order pages, and running the calculations you asked for.

Your responsibility. You must have a lawful basis to collect and upload this data, and you must inform the people concerned as your own privacy obligations require.

5. Customer-facing order pages

The Service can publish an individual order to a page reachable by a unique, unguessable link. Those pages may contain the customer's name and order details.

• The link is long and random — it cannot be guessed or enumerated
• Pages are marked noindex, nofollow so search engines do not list them
• You control whether a page is enabled and you can disable it at any time
• Anyone holding the link can open the page. Send links only to the people concerned

We log page views (timestamp and an anonymised visitor identifier) so you can see whether your customer opened the page. We do not use this for advertising or profiling.

6. Why we process your data, and on what basis

7. AI features

Some features use AI to make the Service easier to use — for example reading the columns of a spreadsheet you upload, or drafting a message to your customer.

• Content is sent to our AI provider only to perform the task you asked for
• It is not used to train the provider's models, and we do not use it to train models
• Output is always shown to you for confirmation before anything is saved or sent
• You can avoid these features by entering data manually

Our current AI provider is listed in section 8.

8. Who we share data with

We use a small number of providers, each under contract and only for the purposes below.

We may also disclose data where legally required, to protect rights or safety, or in connection with a merger, acquisition or sale of assets — in which case we will notify you.

9. Cookies and similar storage

We use:

• Essential storage — to keep you signed in and secure the Service. This cannot be turned off.
• Analytics storage — one anonymous identifier we keep in your browser, plus Google Analytics, to understand how many people arrive and which page or campaign sent them.
• Advertising storage — Google Ads, to measure whether an ad we paid for led to a signup. We record the click identifier Google adds to the address when you arrive from an ad, and report the signup and the start of a paid subscription back to Google.

We do not sell personal data and we do not use cross-site tracking for profiling or for audience building.

If you are in the EEA, the UK or Switzerland, analytics and advertising storage waits for your consent: we ask once, on your first visit, and nothing is stored until you answer. We honour Global Privacy Control, so a browser that sends it is never asked and never tracked. To change an answer you have already given, clear this site’s data in your browser and the question will be asked again.

10. International transfers

We and our providers may process data outside your country, including outside the EEA, UK or Argentina. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

11. How long we keep data

• Account and Your Content: for as long as your account is active
• After cancellation or termination: deleted within 30 days, except where we must retain records for legal, tax or accounting reasons
• Billing records: as required by law, typically 5–10 years
• Logs and analytics: typically 12 months
• Support messages: 12 months

You can delete individual records at any time from within the Service.

12. Security

We use encryption in transit (HTTPS), encryption at rest through our hosting provider, access controls, and least-privilege access for our team. No system is perfectly secure. If a breach affects your data, we will notify you and, where required, the relevant authority without undue delay.

13. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent where processing relies on it
• Lodge a complaint with your data protection authority

To exercise any of these, email marat@ordamo.app. We will respond within 30 days.

If you are in Argentina, you have rights under Ley 25.326 and may contact the Agencia de Acceso a la Información Pública. If you are in the EEA or UK, you may contact your local supervisory authority.

If your data was uploaded by one of our customers, we act as a processor. Please contact that business directly — we will refer your request to them and assist them in responding.

14. Children

The Service is for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.

15. Changes to this notice

We may update this notice. For material changes we will notify you by email or in the Service before they take effect. The date at the top shows the current version.

16. Contact

Marat Murzakhanov · Juramento 3939, CABA, Argentina · marat@ordamo.app