Privacy Policy

Effective April 24, 2026

Ordalyn (Laurie Stach Holdings LLC, “we,” “us”) operates a practice-management tool for solo consultants: engagements, invoices, proposals at www.ordalyn.com. This page explains what we collect, how we use it, and the rights you have.

What we collect

• Account info: your email and password (handled via Supabase Authentication).
• Business profile: company name, your name, email, phone, address, and payment instructions that you enter to appear on your own invoices.
• Client and engagement data: client name, project, hours, rates, dates, and any notes you enter about your engagements.
• Invoices and proposals you create, and any past proposals you upload for style learning.
• Diagnostic logs: application error logs and sign-in events.

How we use it

We use your data to operate Ordalyn: sign you in, save your profile, render your dashboard, and deliver the feature set of the product you're using. We do not use your data to target ads.

What we share

We do not sell your data. Your business and client info is never shared with anyone except the processors we use to host and serve the app.

Third parties we use

Supabase (authentication + data storage), Vercel (hosting), OpenAI (proposal drafting - content you submit is sent to OpenAI under their API data usage policy, which does not train their models on API content as of publication).

Retention

We retain your account data for as long as your account exists. If you delete your account, we delete your personal data within 30 days, except where we are legally required to keep records (e.g., tax records for invoices, or abuse/fraud logs).

Your rights

• Access and download your data by emailing support@ordalyn.com.
• Correct or update your data from inside the app.
• Delete your account from Settings. Deletion is immediate; processor copies are purged within 30 days.
• If you are in the EEA or UK, object to processing or lodge a complaint with your data protection authority.
• If you are in California, request details of any disclosure of your personal information in the past 12 months. We disclose only to the processors listed above for the purpose of operating the service.

Children

Ordalyn is not intended for anyone under 13 (or 16 in the EEA/UK). We do not knowingly collect data from children. If you believe a child has created an account, email support@ordalyn.com and we will delete it.

Google API Services User Data Policy

Ordalyn's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not share Google user data with third parties, do not use it for advertising, and do not allow humans to read it except where necessary for security, to comply with law, or with your explicit consent.

Contact

Privacy questions: support@ordalyn.com
Mailing address: c/o DelawareRegisteredAgent.com, 8 The Green, Suite A, Dover, DE 19901

Values shown in curly-brace placeholders will be replaced with real legal entity information before public release.