Privacy Policy

Who we are

Ordo ("Ordo", "we", "us") is a sales CRM for B2B teams.

This policy covers the website at ordo-crm.com, signing up, Ordo Cloud (the app we host for you) and the calendar and email connections inside it. Ordo On-site runs on your own server, so what you keep there never reaches us.

Questions or requests: [email protected].

What we collect

If you joined our waitlist

Your email address, the page you joined from, the plan you picked (if any), the date, and the country your connection came from. We don't keep your IP address.

When you use Ordo Cloud

• Your account: your name, work email, company name and how you sign in. Passwords are stored only as a secure hash.
• Your workspace: everything your team puts in Ordo, such as companies, contacts, leads, deals, tasks, notes, meetings and files. Your company decides what goes in. We hold it on your company's behalf.
• Payments: handled by our payment provider (Stripe). We see the plan, the amounts and the last four digits of the card, never the full card number.
• Technical logs: IP address, browser and the time of each request, kept for up to 30 days to keep Ordo secure and fix problems.

Cookies

Ordo sets one cookie: the one that keeps you signed in. The website remembers your light or dark choice in your browser. There are no advertising or tracking cookies.

Google Calendar

Each person can connect their own Google account in Ordo (My account → Email & calendar → Connect Google). Nobody else can connect it for them, admins included.

What Ordo reads

• Your Google account's email address, to show which account is connected.
• Events on your calendar (permission: calendar.events): each event's title, date and time, the guests' email addresses, whether you declined, and whether it is private.

Why

• So a meeting with one of your leads or contacts shows up in Ordo on that person's and their company's timeline, without typing it twice.
• So meetings you plan in Ordo appear in your calendar, and a change on either side follows on the other.

What Ordo keeps, and what it leaves alone

• Ordo keeps only events that have one of your CRM's leads or contacts as a guest: the title, date, time, length and which lead or contact it's with.
• Private events, events you declined and events with nobody from your CRM are read only to check that, and are never stored.
• Meetings Ordo adds to your calendar have their title, time and the note "Added from Ordo". They have no guests, so nobody gets an invitation from Ordo.
• Your Google sign-in tokens are stored encrypted (AES-256).
• Ordo does not ask for access to your Gmail, contacts or files.

How Google data is used and shared

• It is used only to show and update your meetings in Ordo, for you and the teammates who can see that lead or contact.
• It is never sold, never used for advertising and never used to train AI models.
• If you ask Ordo AI about a meeting, its details are sent to our AI provider to write the answer you asked for, and nothing more.
• No person at Ordo reads it unless you ask us to (for support), it's needed for security, or the law requires it.

Ordo's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How to disconnect

• In Ordo: My account → Email & calendar → Disconnect. Ordo stops syncing, gives the access back to Google and deletes your stored tokens.
• Or in your Google account: myaccount.google.com/permissions → Ordo → Remove access.
• Meetings already in Ordo stay in your CRM like any other meeting. You can delete them there, or email [email protected] and we will delete what Ordo got from your Google account.

Microsoft Outlook and calendar

Connecting a Microsoft account works the same way and is also each person's own choice. Ordo asks for your profile (to show which account is connected) and your calendar (Calendars.ReadWrite), and keeps meetings exactly as described for Google.

If you also turn on email tracking (Mail.Read), Ordo looks only for emails with one of your leads or contacts on them. For those it keeps the subject, who it's from and to, the date, the first lines and a link back to Outlook. Message bodies, attachments and every other email stay in Outlook. Ordo never sends, moves or deletes email.

Logging emails by BCC

Anyone can log an email by adding their team's Ordo address in BCC, or by forwarding an email to it. For emails from your team with a lead or contact on them, Ordo keeps the same few details: the subject, sender, recipients, date and first lines. Anything else sent to that address is discarded.

AI features

When you use Ask Ordo AI, AI call notes or company research, the records needed for that answer are sent to our AI provider, Anthropic (Claude), to write it. Anthropic does not use this data to train its models, and we don't either. Ordo On-site uses the AI you connect yourself, so nothing goes to us.

How we use it

• To run Ordo for you: sign-in, your workspace, sync, backups and support.
• To keep it secure and fix problems.
• To bill your company, when you're on a paid plan.
• To email you about your account. If you joined our waitlist before sign-up opened, you get one email that Ordo is open and occasional launch news, and every email has an unsubscribe link.

We don't sell personal data, show ads or build advertising profiles.

Who helps us run Ordo

We use a few providers, each only for its part:

• Cloudflare: the website, the old waitlist, email logging and file storage.
• Our cloud hosting provider: the servers Ordo Cloud runs on.
• Anthropic: the AI features.
• Stripe: payments.
• Google and Microsoft: only for the people who connect their account.

They may process data in countries other than yours. Where the law asks for it, we use standard safeguards such as the EU's Standard Contractual Clauses. We would share data with anyone else only if the law requires it, or with your company's agreement if Ordo is ever sold.

How long we keep it

• Waitlist: until you ask us to remove you, or 12 months after Ordo Cloud opens to everyone.
• Workspaces: for as long as your company uses Ordo. After a trial ends, the workspace stays read-only, so nothing is lost. If your company closes its account, we delete the workspace within 30 days, and backups within a further 30 days.
• Technical logs: up to 30 days.
• Billing records: as long as tax law requires.

Security

Everything travels over HTTPS. Passwords are hashed, calendar and email sign-in tokens are encrypted, and every workspace is kept apart from the others. Inside a workspace, roles decide who sees what. Only we can reach the servers, and only to run and support Ordo. If a breach ever affects your data, we will tell you without delay.

Your choices and rights

• See, correct or export your data. Admins can export the whole workspace from Ordo at any time.
• Disconnect Google or Microsoft whenever you like.
• Ask us to delete your account or your data, or object to how we use it.

If you are a lead or contact in a company's Ordo workspace, that company decides what is kept about you, so please ask them first. We'll help them answer.

Email [email protected] and we will answer within 30 days. You can also complain to the data protection authority where you live.

Children

Ordo is a tool for businesses and is not meant for anyone under 16.

Changes

If this policy changes, the date at the top changes too. For anything important, we'll email account owners before it takes effect.

Contact

Ordo
[email protected]

See also our Terms of Service.