Privacy Policy

Last Updated: October 9, 2025

At Ordana Inc. ("Ordana," "we," "our," or "us"), we value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard the information you provide when you use our website, platform, and AI services (collectively, the "Services"). By accessing or using Ordana, you agree to this Privacy Policy.

1. Information We Collect

We collect information to provide, improve, and secure our Services. This may include:

A. Information You Provide

• Business account data such as name, company name, business address, and contact details
• Login and authentication information when you create an account
• Communication data from messages, support requests, or feedback
• Billing information when you subscribe or make payments

B. Automatically Collected Information

• Usage data (pages visited, time spent, features used)
• Device and browser data (IP address, operating system, browser type)
• Cookies and analytics data to understand and improve site performance

C. Data Processed Through Our AI Services

When you use Ordana's AI Agents (Desk, Voice, Predict, Chat), we may process:

• Order information from emails, faxes, voice inputs, or text messages
• Catalog and customer data used for model training and automation
• Interaction transcripts or metadata used to improve model accuracy

2. How We Use Your Information

We use your information to:

• Operate and deliver our Services
• Train and improve Ordana's AI models for accuracy and performance
• Personalize your experience and recommendations
• Provide technical support and communicate about product updates
• Analyze trends, usage, and performance metrics
• Enforce our Terms & Conditions and comply with legal obligations

We do not sell or rent your data to third parties.

3. Data Ownership and Access

You own all business and customer data you upload or process through Ordana. Ordana only accesses this data to provide the contracted Services or to enhance system reliability and accuracy. You can request access, correction, or deletion of your data at any time by contacting privacy@ordana.ai.

4. Data Security

We employ industry-standard technical and organizational measures to safeguard your data, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls and multi-factor authentication
• Regular security audits and vulnerability assessments
• Limited internal data access based on job function

However, no system is 100% secure. You acknowledge that data transmission over the internet carries inherent risks.

5. Data Retention

We retain your data only as long as necessary to fulfill the purposes described in this policy or as required by law. When no longer needed, data is securely deleted or anonymized.

6. Sharing of Information

We may share information in limited circumstances:

• With service providers who help us deliver functionality (e.g., cloud hosting, analytics, billing)
• With integration partners (e.g., ERP or eCommerce systems) when required to deliver your configured Services
• As required by law, regulation, or valid legal process

All partners are bound by confidentiality and data protection obligations consistent with this policy.

7. International Data Transfers

Ordana may store and process data in the United States or other countries where we or our service providers operate. We comply with applicable data transfer regulations and use safeguards such as Standard Contractual Clauses (SCCs) where required.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. You can control or delete cookies through your browser settings, but disabling them may limit functionality.

9. Your Rights (GDPR & CCPA)

Depending on your location, you may have the right to:

• Access and obtain a copy of your data
• Request correction or deletion
• Object to certain data uses or request restriction of processing
• Port your data to another service provider

To exercise these rights, contact us at privacy@ordana.ai. We will respond within the time required by applicable law.

10. Children's Privacy

Ordana's Services are intended for business use only and not directed to individuals under 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated "Last Updated" date. Continued use of our Services after such changes indicates your acceptance.

SMS Messaging Privacy

If you opt in to receive SMS messages from Ordana, we may collect and process your mobile phone number, SMS opt-in status, message history, message metadata, and related order-assistance information in order to provide text-based order assistance, customer support, pilot workflows, and order-related updates.

Message frequency varies. Message and data rates may apply. You may reply HELP for help or STOP to opt out at any time.

We do not share, sell, rent, or otherwise provide your mobile phone number, SMS opt-in data, or messaging consent information to third parties or affiliates for marketing or promotional purposes.

We may share SMS-related information with service providers only as necessary to operate and deliver the messaging service, such as telecommunications providers, cloud hosting providers, and support systems. These service providers are not permitted to use SMS opt-in data or messaging consent for their own marketing or promotional purposes.