What we collect
Account details: your email address and password, or your Google sign-in. When you sign up we also ask for your name, your company (optional), and where you heard about Ordren. You can add a profile photo.
Your work: project descriptions, requirement checklists, follow-up answers, shortlists, notes, and request-for-quote drafts.
What you send us: feedback, reports that a check is wrong, and, if you choose to answer it, the short survey shown when you delete your account.
Billing and usage: credit purchases (credits, amount, status) and your balance. You pay on Stripe's checkout page; Ordren does not receive or store your card details.
Technical data: sign-in session cookies, per-account request counts used for rate limits, basic page-view analytics in the dashboard, and the request logs our hosting providers keep.
How we use it
To run your projects: turn your description into a checklist, search the web for suppliers or people, read their pages, and check each requirement against quotes from those pages.
To run your account: sign-in, credits and purchases, rate limits, and support.
To improve Ordren: our team reviews feedback, check reports, run diagnostics, and signup answers (name, company, how you found us) in an internal admin panel.
To send product update emails, only if you opt in.
Who processes it
Supabase runs sign-in, the database, and file storage. Vercel hosts the dashboard and provides its page-view analytics. Stripe processes payments.
OpenRouter routes AI model requests: your project description, checklist, and the text of pages being assessed are sent to the model that drafts checklists and reads evidence.
Exa and Parallel run web searches built from your project. Firecrawl, with AlterLab as a fallback, fetches public web pages. For people searches, GitHub and People Data Labs may be used to find public professional profiles.
Resend delivers product update emails to people who opted in.
We send account emails, such as sign-up confirmations and password resets, when you need them. Product update emails go only to people who turn them on in Settings; Resend receives your name and email address to send them. Every one has an unsubscribe link. Unsubscribing, a hard bounce, or a spam complaint turns them off, and only you can turn them back on.
Security
Connections use HTTPS. Database access rules limit each account to its own projects, and admin access is limited to the Ordren team.
Retention and deletion
We keep your data while your account is open. Deleting your account in Settings permanently removes your sign-in, profile, projects, runs, results, shortlists, share links, check reports, and purchase records from our database.
Feedback you sent, including exit-survey answers, is kept but no longer linked to your account. Stripe keeps its own payment records. Logs and copies held by the services above are removed on their own schedules or on request.
Public web information
Ordren researches public web pages: supplier sites, directories and articles, and, for people searches, public professional profiles. Pages used as evidence are stored so every quote can be checked against its source. These records are shared across projects and are not deleted with any one account.
Suppliers and people do not submit, control, or review how they appear. If you appear in results and want something corrected or removed, email [email protected].
AI models
Ordren does not train AI models on your data. Model requests go through OpenRouter to the model providers it routes to, under their terms. AI output can be incomplete or wrong, which is why each result links to its source.
Your choices
From Settings you can update your profile, turn product emails on or off, and delete your account. You can revoke share links from the project. To ask for a copy of your data, a correction, or a deletion you can't make yourself, email [email protected]. Depending on where you live, local law may give you further rights.
Changes
When how Ordren handles data changes, we update this page and the date above. For material changes we also tell account holders by email or in the product.
Contact
Privacy questions and requests: [email protected].