Privacy Policy

1. Introduction

Privacy is a core part of Ordono.

This Privacy Policy explains how Ordono collects, uses, stores, processes and protects personal data when you use the Ordono mobile application, website and related services (“Ordono” or the “Services”).

This Privacy Policy applies to users in Switzerland, the European Economic Area (EEA) and other jurisdictions where Ordono is available.

2. Data Controller

The controller responsible for the processing of personal data is:

Ordono
Gsellstutz 6
8306 Brüttisellen
Switzerland

Email: hello@ordono.app

3. Personal Data We Process

The personal data we process depends on how you use Ordono.

3.1 Account Information

When you create or use an Ordono account, we may process:

• Name
• Email address
• Authentication information
• Language and account preferences
• Subscription plan
• Account status
• Account creation and login information

Passwords are handled through our authentication infrastructure and are not stored by Ordono in plain text.

3.2 Documents

Ordono allows you to upload, scan and store personal documents.

These may include, for example:

• Employment contracts
• Insurance documents
• Rental agreements
• Invoices
• Warranties
• Subscription agreements
• Identification documents
• Travel documents
• Tax documents
• Financial documents
• Health-related documents
• Other personal documents

Documents may contain personal data and, depending on the document, sensitive personal data or special categories of personal data.

You retain ownership of your documents.

3.3 Information Extracted From Documents

To provide Ordono’s features, we may automatically extract, analyze and store information contained in your documents, including:

• Document type
• Contract start and end dates
• Expiration dates
• Cancellation deadlines
• Renewal dates
• Providers or contractual parties
• Payment amounts
• Recurring costs
• Contract numbers
• Policy numbers
• Document names
• Other information relevant to the document

This information is used to provide features such as organization, search, reminders, cost insights and Ordono AI.

3.4 Ordono AI

When you use Ordono AI, we process:

• Your questions and prompts
• Relevant information from your documents
• Relevant document sections
• Previous conversation context where necessary to answer your request

Where possible, Ordono is designed to process only the information necessary to provide the requested AI functionality.

AI-generated responses may contain errors or incomplete information. Important information should always be verified against the original document.

Ordono AI does not constitute legal, financial, tax, medical or other professional advice.

3.5 Device and Technical Information

We may automatically process limited technical information necessary to operate, secure and improve Ordono, including:

• Device type and model
• Operating system
• App version
• Language settings
• IP address
• Technical logs
• Crash information
• Diagnostic information
• Security-related events

3.6 Subscription and Payment Information

Subscriptions may be processed through Apple App Store, Google Play and/or our subscription management providers.

Ordono generally does not receive or store your full payment card details.

We may process information such as:

• Subscription type
• Subscription status
• Purchase date
• Renewal date
• Transaction identifiers

4. How We Use Personal Data

We process personal data to:

• Create and maintain your Ordono account
• Authenticate users
• Store and organize documents
• Analyze and classify documents
• Extract relevant document information
• Provide reminders and notifications
• Provide Ordono AI
• Answer questions about your documents
• Provide document search
• Generate cost and contract insights
• Manage subscriptions
• Provide customer support
• Detect and prevent fraud or misuse
• Protect the security of Ordono
• Diagnose technical issues
• Improve the reliability and performance of the Services
• Comply with applicable legal obligations

5. Legal Basis for Processing

Where the GDPR applies, Ordono processes personal data based on one or more of the following legal bases:

Contract

Processing necessary to provide the Services you request, including account management, document storage, document analysis, reminders and Ordono AI.

Consent

Where applicable, we may ask for your consent, for example for optional permissions, certain notifications or other processing requiring consent.

Legitimate Interests

We may process limited personal data where necessary for legitimate interests such as:

• Securing the Services
• Preventing abuse
• Improving stability and reliability
• Providing customer support

We balance these interests against your privacy rights.

Legal Obligations

We may process or retain certain information where required by applicable law.

6. Sensitive Personal Data

Documents uploaded to Ordono may contain sensitive information, including:

• Health information
• Financial information
• Insurance information
• Identification information
• Tax information
• Other sensitive personal data

Ordono processes such information only where necessary to provide the Services requested by you and in accordance with applicable data protection law.

Users should only upload documents they are legally permitted to store and process.

7. Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss or destruction.

Depending on the relevant system, these measures may include:

• Encryption during data transmission
• Encryption of stored data where supported
• Authentication and access controls
• Restricted infrastructure access
• Security monitoring
• Logging and abuse prevention
• Regular security updates
• Backup and recovery mechanisms

No system can guarantee absolute security. We continuously review our security measures as the Services evolve.

8. Privacy Commitment

Your documents are your documents.

Ordono does not sell personal data.

Ordono does not rent personal data.

Ordono does not provide your documents or personal data to advertisers for targeted advertising.

Ordono does not allow employers, corporate customers or other organizations providing Ordono as a benefit to access your private documents, Ordono AI conversations or other personal document content unless you explicitly choose to share information with them through a feature designed for that purpose.

9. AI Processing

Ordono uses artificial intelligence technologies to provide features such as:

• Document classification
• Information extraction
• Document summaries
• Question answering
• Contract and deadline insights
• Cost insights

Only information reasonably necessary for the requested AI function should be sent to the relevant AI service.

AI outputs are generated automatically and may be inaccurate.

Ordono should not be relied upon as the sole source for important legal, financial, insurance, medical, tax or contractual decisions.

10. Service Providers

Ordono uses selected service providers to operate the Services.

Depending on the features you use, these may include providers for:

• Cloud hosting and infrastructure
• Database and authentication
• Document and file storage
• Document recognition and OCR
• Artificial intelligence
• Push notifications
• Subscription management
• Analytics
• Crash and error monitoring
• Transactional email

Our current service providers may include:

Supabase
Database, authentication and related backend services

Google Cloud
Cloud infrastructure, document processing and related services

OpenAI
AI-powered document understanding and Ordono AI functionality

Firebase
Push notifications and related mobile services

RevenueCat
Subscription and entitlement management

Sentry
Crash and error monitoring

Mixpanel
Product analytics

Resend
Transactional email delivery

Service providers may only process personal data for the purposes for which they are engaged and subject to applicable contractual and data protection requirements.

The providers used by Ordono may change as our infrastructure evolves. This Privacy Policy will be updated where required.

11. Analytics

We may use analytics tools to understand how Ordono is used and improve the product.

Analytics may include information such as:

• Feature usage
• App sessions
• App version
• Device type
• Technical events

Where legally required, analytics that are not strictly necessary will only be used with your consent.

We do not use document contents for advertising purposes.

12. Push Notifications

If you enable notifications, Ordono may send notifications relating to:

• Document deadlines
• Contract renewals
• Expiring documents
• Reminders
• Important account information

You can manage notification permissions through your device settings and, where available, within Ordono.

13. International Data Transfers

Ordono is based in Switzerland.

Some service providers may process personal data in countries outside Switzerland or the EEA.

Where personal data is transferred internationally, Ordono uses safeguards required under applicable law, which may include:

• Countries recognized as providing an adequate level of data protection
• Contractual safeguards
• Standard contractual clauses
• Other legally permitted transfer mechanisms

We take reasonable steps to ensure that transferred personal data remains appropriately protected.

14. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

In general:

Account data is retained while your account remains active.

Documents and extracted document information are retained until you delete them or delete your account, subject to necessary technical processing and backup periods.

AI conversation data is retained only as necessary to provide the relevant functionality and operate the Services.

Technical and security logs may be retained for a limited period for security, troubleshooting and abuse prevention.

Transaction and accounting information may be retained where required by law.

Backup copies may remain temporarily after deletion until they are overwritten as part of our normal backup cycle.

We will not retain personal data longer than reasonably necessary unless applicable law requires us to do so.

15. Account and Data Deletion

You can request deletion of your Ordono account and associated personal data.

Account deletion can be initiated through the Ordono app.

You may also request deletion by contacting:

hello@ordono.app

When an account is deleted:

• The account will be closed
• Uploaded documents will be scheduled for deletion
• Extracted document information will be scheduled for deletion
• Associated personal information will be deleted unless retention is legally required

Certain information may remain temporarily in backups or where retention is required by applicable law.

16. Corporate and B2B Accounts

Ordono may be provided to users through an employer, insurer or other organization.

The organization providing access may receive limited administrative information necessary to manage the Ordono license or entitlement, such as:

• Name
• Email address
• Invitation status
• License status
• Activation status

Such organizations do not receive access to:

• Your private documents
• Document contents
• Ordono AI conversations
• Personal reminders
• Personal cost information
• Private document categories

If your corporate entitlement ends, your personal Ordono account and documents remain separate from the organization.

Depending on your plan, your account may be moved to the Ordono Free plan unless you independently subscribe to another plan.

17. Sharing With Other Users

Where Ordono offers document or family-sharing functionality, information is shared only with users you choose to share it with.

You are responsible for ensuring that you have the right to share any personal information or documents belonging to another individual.

18. Disclosure Required by Law

We may disclose personal data where required to:

• Comply with applicable law
• Comply with a valid legal request
• Protect the rights and security of Ordono or its users
• Investigate fraud, abuse or security incidents

We will only disclose information to the extent legally required or permitted.

19. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate personal data
• Request deletion of personal data
• Request restriction of processing
• Object to certain processing
• Receive certain personal data in a portable format
• Withdraw consent where processing is based on consent
• Obtain information about how your personal data is processed

Requests can be submitted to:

hello@ordono.app

We may need to verify your identity before fulfilling a request.

20. Complaints

If you believe your personal data has been processed unlawfully, you may contact us at:

hello@ordono.app

You may also have the right to contact the competent data protection authority.

For Switzerland, the competent federal supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC).

If the GDPR applies, you may also have the right to lodge a complaint with a competent supervisory authority in the EEA.

21. Children’s Privacy

Ordono is not intended for children under the age of 16.

We do not knowingly allow children under 16 to create an Ordono account.

If we become aware that personal data from a child has been collected contrary to applicable law, we will take appropriate steps to delete it.

22. Changes to This Privacy Policy

We may update this Privacy Policy as Ordono evolves or where legal, technical or regulatory requirements change.

The latest version will always be available through the Ordono app or website.

Where required, we will inform users of material changes.

23. Contact

For questions about this Privacy Policy or the processing of personal data, please contact:

Ordono
Gsellstutz 6
8306 Brüttisellen
Switzerland

hello@ordono.app