Privacy Policy

Ordify ("we", "us", "our") operates the website ordify.site and the storefront-generation service available through it (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the rights you have over it.

By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

Account information: when you sign in with Google we receive your name, email address, and profile picture. We do not receive your Google password.

Store information: the contents of the Google Sheet you connect, including product names, prices, images, your business WhatsApp number, address, and any other details you publish.

Billing information: if you upgrade to a paid plan, payment is processed by LemonSqueezy. We receive your subscription status, license key, and billing email — we do not receive or store your card details.

Usage data: storefront views, order-click events, IP address, browser/device type, and referrer. We use this for analytics and abuse prevention.

Cookies: we use first-party cookies to keep you signed in and remember theme preferences. We do not use third-party advertising cookies.

To provide and operate the Service — rendering your storefront, processing orders, sending account emails.

To process payments and manage subscriptions through our payment provider.

To show you analytics about your store's performance.

To prevent fraud, abuse, and violations of our Terms of Service.

To improve the Service and develop new features.

Public storefront content: anything you publish to your Google Sheet that powers your storefront is, by design, publicly accessible to your customers via your storefront URL.

Service providers: we use Neon (database), Google (authentication), LemonSqueezy (payments), and Sentry (error tracking). Each processes data only as needed to operate the Service.

Legal compliance: we may disclose information if required by law, court order, or to protect our rights.

We do not sell your personal information to third parties.

We retain your account and store data for as long as your account is active. If you delete your account, we delete or anonymize personal data within 30 days, except where retention is required by law (e.g. tax records of paid transactions).

You have the right to access, correct, export, or delete the personal information we hold about you. You may also object to certain processing. To exercise these rights, email hello@ordify.site.

If you are in the EU/UK, you have additional rights under GDPR. If you are in California, you have additional rights under CCPA. Contact us to exercise them.

We use industry-standard encryption (TLS) for data in transit and at rest. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

The Service is not intended for users under 13 years of age (or under 16 in the EU). We do not knowingly collect data from children.

Our servers and service providers may be located outside your country of residence. By using the Service you consent to your information being transferred to and processed in those jurisdictions.

We may update this Policy from time to time. Material changes will be notified by email or via a banner on the Service. Continued use after changes take effect constitutes acceptance.