This policy explains what Ordin Labs collects when you use the Ordin website and platform, why we collect it, and the choices you have. We have tried to write it the way we write everything else: plainly.
Who we are
Ordin Labs operates the Ordin platform and this website. For the personal data described here, Ordin Labs is the controller. When you run agents on Ordin with your own customers' data, you are the controller of that data and we process it on your behalf under our data processing agreement.
What we collect
- Account details: your name, work email, company and role when you sign up or contact us
- Billing details: handled by our payment provider; we keep only the last four digits and the billing address
- Usage data: pages viewed, features used, device and browser type, and approximate location from your IP address
- Run data: the jobs, prompts, tool calls, outputs and traces your agents create on the platform
- Support data: messages you send us and the context you choose to attach
How we use it
We use your data to provide and secure the platform, bill you correctly, answer your questions, and improve the product. We rely on our contract with you for the first three, and on our legitimate interest in a reliable, secure service for the rest.
- Running, retrying and replaying the jobs you start
- Detecting abuse, fraud and security incidents
- Sending service messages such as invoices and incident notices
- Sending product news, only if you opt in, with an unsubscribe link in every email
Your run data stays yours
Run data belongs to you. We do not use it to train models, we do not sell it, and our staff can only open a trace when you grant access for a support request. Model providers you connect receive only what a step sends them, under their own terms.
Who we share it with
We share data only with the providers that help us run Ordin, such as cloud hosting, payments, email and error monitoring, each under a contract that limits use to the service they provide. We disclose data to authorities only when the law requires it, and we tell you first where we are allowed to.
How long we keep it
- Account data: for as long as your account is open, then 30 days
- Run traces: for your plan's replay window (7 or 90 days, or as configured on Enterprise)
- Billing records: as long as tax law requires, usually seven years
- Website analytics: 14 months, in aggregate
How we protect it
Data is encrypted in transit and at rest. Access is scoped, logged and reviewed, credentials given to agents are short-lived, and every action an agent takes is written to the audit trail. We test our controls with independent auditors every year.
Your rights
Depending on where you live, you can ask to see, correct, export or delete your personal data, object to how we use it, or withdraw consent you gave. Write to us and we will answer within 30 days. You can also complain to your local data protection authority.
Cookies
We use essential cookies to keep you signed in and to protect forms. With your consent, we also use analytics cookies to understand which pages help. You can change your choice at any time from the cookie settings link in the footer.
Changes to this policy
When we change this policy we update the date at the top. For changes that matter, we email account owners at least 30 days before they take effect.
Contact us
Questions about privacy go to privacy@ordin.example, or by post to Ordin Labs, 100 Example Street, London. Our data protection officer reads every message.