Privacy policy

Draft of October 25, 2026

Draft. This policy is being finalized and isn't in effect yet. Highlighted items are still to be filled in.

[Ordino's legal name] ("Ordino", "we", "us") runs the Ordino website at getordino.com and the Ordino Decision Center, a web platform that helps businesses watch their cash flow, documents, cards and idle cash. This policy explains what information we collect, how we use it, who we share it with, and your choices. Ordino is based in California.

What we collect

• Account information: your name, email address, phone number if you add one, and your business's name.
• Bank and card data: account balances and transactions, retrieved through Plaid when you connect your accounts. We never see or store your bank password; we keep only an encrypted access token.
• Accounting data: invoices, bills, payroll and ledger data from your accounting software, when you connect it.
• Email and files you connect: if you connect a Google or Microsoft account, we read messages, documents and spreadsheets to find invoices, receipts, renewal notices and other business records. See "Google and Microsoft data" below.
• Other tools you connect to Ordino Brain: messages and pages from Slack and Notion, records from HubSpot, spreadsheets you upload, and emails you forward to your Ordino address, used to learn how your business works.
• Documents you upload: statements, bills, contracts and receipts you add to the Document Vault.
• Text messages: if you turn on texting, your mobile number and the messages you exchange with Ordino.
• Billing information: handled by Stripe. We don't receive or store your full card number.
• Usage information: pages and screens visited, actions taken, and device and browser type, used for analytics and fixing problems.
• Cookies and local storage: used to keep you signed in and to remember preferences such as your display mode and last business viewed. We don't use advertising cookies.

How we use it

• To run the Decision Center: watch your accounts, find what needs your attention, draft reminders and other messages, and check that what you approved actually happened.
• To send you the alerts, briefs and texts you've chosen.
• To verify your phone number and secure your account.
• To bill you and answer support requests.
• To keep the service safe, and to fix and improve it.

We don't sell your personal information, and we don't share it for advertising.

AI and automated processing

Ordino uses AI models from OpenAI and Anthropic to read documents, answer your questions, draft messages and write summaries. We use them under business terms that don't allow them to train their models on your data. Some calculations, such as categorizing transactions, forecasting cash flow and comparing card rewards, run on our own systems without being sent to an AI provider.

You can turn individual AI features on or off in Settings, under Privacy & Data. Turning one off stops future processing; it doesn't delete what was already extracted.

Ordino doesn't move money. Drafted messages are sent when you approve them, unless you choose in Settings to let Ordino send certain kinds of messages on its own after a waiting period.

Google and Microsoft data

If you connect a Google account, Ordino can read your Gmail messages, Google Drive files, Docs and Sheets, and create Gmail drafts for you to review and send. If you connect a Microsoft account, Ordino can read your mail. We use this access only to find and organize your business records and to prepare drafts you've asked for.

Ordino's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google or Microsoft data for advertising, we don't sell it, and we don't use it to train AI models. You can disconnect either account, or Slack, Notion or HubSpot, at any time in Settings, under Integrations.

Who we share it with

We share information only with service providers who process it for us, under contracts that limit them to that purpose:

• Plaid: connects your bank and card accounts.
• OpenAI and Anthropic: AI processing, as described above.
• Supabase: sign-in and session security.
• Twilio: sends and receives text messages.
• Stripe: payments and billing.
• Resend and SendGrid: send email to you and receive email you forward to Ordino.
• Google, Microsoft, Slack, Notion and HubSpot: only if you connect those accounts.
• Your accounting software: only if you connect it.
• Railway: hosts Ordino's servers.
• [Database host]: stores your data.
• [Website host]: serves this website.

Mobile numbers and text message consent are never shared with third parties or affiliates for their marketing.

We may also disclose information when the law requires it, to protect people's safety, or as part of a merger or sale of the business, in which case this policy continues to apply to your information.

How long we keep it

We keep your account data while your account is open. Uploaded documents and the data extracted from them are deleted automatically 24 months after upload, and you can delete any document sooner from the Document Vault.

You can close your account in Settings, under Account. You then have 30 days to change your mind, after which your data is permanently deleted. Copies can remain in our hosting provider's backups for up to [backup retention period] before they're overwritten. Data that belongs to a business you share with other people stays with that business until the business itself is deleted.

Security

• Data travels over encrypted connections (TLS 1.2 or higher).
• Bank access tokens and some document details get an extra layer of encryption (AES-256-GCM).
• Sign-in is handled by Supabase, which manages password hashing and sessions.
• Inside Ordino, access to your data and to production systems is limited to the people who run and support the service.

No system is perfectly secure. If you think your account has been compromised, contact us right away at [support email]. If a breach affects your personal information, we'll notify you as quickly as possible and as required by law.

Your choices

• Export your data at any time, on any plan, in Settings under Data.
• Turn AI features on or off in Settings under Privacy & Data.
• Disconnect any bank, accounting, Google or Microsoft account in Settings under Integrations.
• Stop text messages by replying STOP, or in Settings under Messaging.
• Close your account in Settings under Account.

California privacy rights

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you these rights:

• Right to know what personal information we've collected about you, where it came from, why we use it, and who we've shared it with.
• Right to delete your personal information, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We don't sell your personal information or share it for cross-context behavioral advertising.
• Right to limit use of sensitive personal information. Financial account data is sensitive personal information under California law. We use it only to provide the services you've asked for.
• Right to non-discrimination for using any of these rights.

To make a request, email [privacy email] with "California privacy request" in the subject line. We'll verify your identity and respond within 45 days, or tell you if we need up to 45 more.

Do Not Track and Global Privacy Control

We don't track you across other websites, and we don't sell or share your personal information, so there's nothing for a Do Not Track or Global Privacy Control signal to switch off. We treat a Global Privacy Control signal as a request to opt out of sale or sharing.

Children

Ordino is for businesses and isn't directed at anyone under 18. We don't knowingly collect information from children. If you think a child has given us information, contact us and we'll delete it.

Changes to this policy

When we make a material change, such as collecting a new kind of information or sharing with a new kind of provider, we'll email you and show a notice in the Decision Center at least 14 days before it takes effect. The date at the top shows the latest version.

Contact

Questions about this policy: [privacy email], or by mail at [mailing address].