Privacy Policy
Effective October 23, 2026
In short: we use your company's information only to run Ordenra for you. We don't sell it. We don't store Social Security numbers or bank account numbers. You can export your data, and ask us to delete it.
1. Who this covers
This policy explains how Ordenra ("we", "us") handles information in our website and application (the "Service"). Businesses that use Ordenra ("Customers") decide what information about their team is entered; for that information we act on the Customer's behalf. If you are an employee of a Customer, your employer controls your records in Ordenra, and you can also contact them about your information.
2. Information we collect
| Type | Examples |
|---|---|
| Account details | Name, username, email address, password (stored only as a secure hash by our sign-in provider; we can never see it), role, company name, language preference. |
| Team and work records | Schedules, time clock entries, time-off requests, tasks, employee documents and their expiration dates, vehicle and equipment records. |
| Payroll information | Pay rates and methods, hours and work units, earnings, worker classification, work state, W-4 withholding choices, estimated taxes and deductions (for example child support amounts), and pay statements. |
| Billing | Plan and subscription status. Card details are entered on and kept by Stripe; we never see full card numbers. |
| Messages to support | Questions you type into the AI help assistant or send us by email. |
| Technical data | Basic logs (time of requests, errors) and settings saved in your browser, such as language and the last page you opened. We do not use advertising or tracking cookies. |
We do not collect Social Security numbers, bank account numbers or government ID images. Year-end tax pages leave those for you to add on the official forms.
3. How we use information
- To provide the Service: show your workspace, calculate payroll estimates, send pay statements, reminders, schedule and request notifications.
- To keep it secure: authenticate users, keep each company's data separate, prevent abuse and investigate problems.
- To bill subscriptions and answer support requests.
- To improve the Service using aggregated information that does not identify people.
We do not sell personal information or share it for advertising.
4. Service providers we use
We share information only with companies that help us run the Service, under contracts that limit their use of it:
- Supabase: database, file storage and sign-in.
- Netlify: website hosting and background functions (notifications, billing).
- Resend: sending emails such as invitations, reminders and pay statement alerts.
- Stripe: subscription payments.
- Anthropic (Claude): answers questions typed into the AI help assistant. Don't type personal or payroll details there; it is only for questions about using Ordenra.
We may also disclose information if required by law, to protect rights and safety, or as part of a business transfer, in which case this policy continues to apply.
5. Data retention and deletion
We keep Customer data while the account is active. Customers can export their data at any time from the Service. After an account is closed, we delete or anonymize company data within 90 days, except where we must keep records longer by law or to resolve disputes. Delivery logs for notifications are kept for a limited time for troubleshooting.
6. Security
Data is encrypted in transit (HTTPS). Database access rules keep each company's records separate, and only the roles a company assigns can see payroll. Passwords are never stored in plain text. No system is perfectly secure; if we learn of a breach affecting your information, we will notify affected Customers as the law requires.
7. Your choices and rights
- Update your name, username, email, password, notifications and language in My Profile.
- Turn reminder emails off at any time. Some messages, like security and account emails, can't be turned off while you have an account.
- Ask for a copy, correction or deletion of your information by emailing support@ordenra.com. If your records belong to an employer's account, we may refer your request to them.
- Depending on where you live (for example California), you may have additional rights, such as knowing what we collect and not being treated differently for using your rights. We honor these requests as the law requires.
8. Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect information from them.
9. Changes
We may update this policy. For material changes we will notify account owners by email or in the Service before they take effect. The date at the top shows the latest version.
10. Contact
Privacy questions or requests: support@ordenra.com.