Privacy policy
Ordela is an AI administrator for service businesses (salons, clinics, studios): it answers their customers in WhatsApp, Instagram and Telegram, books appointments and sends reminders. This page explains what personal data Ordela handles, why, where it is stored, for how long, and what you can ask of us. Questions: support@ordela.app.
Who is responsible
When you write to a business that uses Ordela, that business is the controller of your data and Ordela processes it on its behalf, under its instructions. For the accounts of business owners and staff, and for requests sent through this website, Ordela is the controller.
What we store
- Customers of a business: your name, phone number or messaging account id, language, the messages you exchange with the business (including transcripts of voice notes, and files, photos or locations you send), and your bookings with that business.
- Owners and staff: phone number, name, role, the messages you write to the setup assistant and to your business’s assistant (including transcripts of your voice messages), sign-in sessions, and sign-in requests (the number entered, IP address, approximate city and device, and a one-way hash of the sign-in code, never the code itself).
- Staff schedules: the name customers book with, weekly hours, the services each person does, and days off with a fixed kind (such as vacation or sick), never a reason in their own words. The business decides what is kept, and it is kept while the person is active, then with the bookings.
- Website requests: what you enter in the contact form (name, business, phone, email, message).
- Technical records: counts of AI usage and response times, without message text, for cost and debugging.
Why
To answer your messages, book and remind you of appointments, show the business its conversations and calendar, let owners and staff sign in securely, prevent abuse, and reply to website requests. We do not sell personal data, use it for advertising, or let it be used to train AI models.
Where it is stored
All storage is on Cloudflare in the European Union. To write a reply, the conversation is sent to our AI provider for that request only.
Service providers
- Cloudflare: hosting and storage (EU), and turning voice messages into text.
- Anthropic: generates the assistant’s replies (US; standard contractual clauses; not used for training).
- Meta (WhatsApp, Instagram) and Telegram: deliver the messages between you and the business, under their own terms.
- Resend: delivers website contact-form emails to us (US; standard contractual clauses).
How long
- Messages: 12 months after the last message in the conversation. Voice-note audio: 30 days.
- Customer profiles and bookings: until the business deletes them, or 24 months after the last visit or message.
- Sign-in requests: 30 days. Sessions: 30 days. Sign-in links: 15 minutes.
- Website requests: 12 months, unless you become a customer.
Your rights and deleting your data
You can ask for a copy of your data, for corrections, or for deletion. As a customer of a business, ask that business, or write to support@ordela.app with the business’s name and the phone number or account you wrote from, and we will pass it on and help them act on it. Deleted customers are anonymised: name, number and message text are removed; the business keeps only an anonymous record of past bookings. You may also complain to your data protection authority.
Changes
If this policy changes, we update this page and the date above.