1. Scope
This Privacy Policy applies to personal data processed through the hosted Ordinus.ai web application, API, collaboration tools, invite features, and share-link features.
2. Data Controller
Controller: Ordinus.ai (incorporated in Turkiye). Contact: privacy@ordinus.ai
3. Data We Process
- Account/profile data: user ID, email, display name, preferences.
- Organization/workspace data: roles, memberships, workspace context.
- User content: prompts, workflows, skills, files, notes, tags, metadata.
- Collaboration data: invites, share links, expiry and access counters.
- Technical/security data: IP address, logs, and anti-abuse/rate-limit signals.
- Billing metadata where paid features are offered.
4. How We Collect Data
- Directly from you when you use the Service.
- From identity provider token claims during authentication.
- Automatically from usage and operational events.
5. Why We Process Data
- To provide and operate core product functionality.
- To authenticate users and secure accounts.
- To support collaboration, invites, and share links.
- To detect abuse, troubleshoot issues, and improve reliability.
- To comply with legal obligations and enforce contractual terms.
6. Legal Bases
Where required by law, processing is based on contract performance, legitimate interests, legal obligations, and consent where applicable.
7. Sharing of Data
We do not sell personal data. Data may be shared with infrastructure providers, identity providers, payment processors (if applicable), professional advisors, and authorities when legally required.
8. International Transfers
Your data may be processed outside your country depending on our infrastructure and vendors. Appropriate safeguards are used when required by law.
9. Retention
Data is retained as needed for service delivery, security, contractual enforcement, and legal compliance. Deletions are handled with reasonable efforts in active systems, while limited residual copies can remain temporarily in backups/logs/caches/compliance records.
10. Security
We apply reasonable technical and organizational safeguards to protect personal data, but no system can guarantee absolute security.
11. Your Rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, object, request portability, withdraw consent, and lodge complaints with competent authorities.
12. Children
The Service is not intended for users under 18 years old.
13. Third-Party Services
Integrations or links to third-party services are governed by those services' own privacy policies.
14. Policy Changes
We may update this Privacy Policy from time to time and revise the Last Updated date.
15. Contact
Privacy requests can be sent to privacy@ordinus.ai.