Privacy Policy

Last updated: May 28, 2026

1. Data We Collect

We collect the following types of information when you use Ordra:

  1. Account information: name, email address, company name, and password when you register.
  2. Business data: products, customers, quotes, orders, invoices, and related records you create within the Service.
  3. Billing information: billing contacts and invoice/payment records associated with your account.
  4. Usage data: pages visited, features used, browser type, IP address, and device information.

2. How We Use Your Data

We use the information we collect to:

  1. Provide, maintain, and improve the Service.
  2. Process transactions and send related information, including confirmations and invoices.
  3. Send technical notices, security alerts, and support messages.
  4. Respond to your requests and provide customer support.
  5. Monitor and analyse usage trends to improve user experience.

3. Data Storage and Security

Your data is stored on secure servers hosted within the European Economic Area. We implement industry-standard security measures including encryption in transit (TLS) and at rest. Access to personal data is restricted to authorised personnel who need it to operate the Service.

4. Third-Party Services

We share data with the following third-party services only as necessary to operate the Service:

  1. Heroku: application hosting and infrastructure.
  2. Sentry: error monitoring and performance tracking (no personal data is sent).
  3. Postmark: transactional email delivery.

We do not sell your personal data to third parties.

5. Cookies

Ordra uses essential cookies to maintain your session and remember your preferences. We do not use third-party tracking cookies or advertising cookies. Essential cookies are required for the Service to function and cannot be disabled.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your account, we will delete your data within 30 days of cancellation. We may retain certain data for longer periods where required by law or for legitimate business purposes such as resolving disputes.

7. Your Rights

You have the right to:

  1. Access the personal data we hold about you.
  2. Correct inaccurate or incomplete data.
  3. Export your data in a standard format using our built-in export tools.
  4. Delete your account and associated data.
  5. Object to the processing of your data for specific purposes.
  6. Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at [email protected].

8. International Data Transfers

If your data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

9. Children

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

If you have questions about this privacy policy or our data practices, please contact us at [email protected].