Trust & data handling
Privacy Notice
Orderly is operated by Northstar Ideations, Inc., a Wisconsin corporation. We use business information to provide the service; we do not sell customer or employee information.
Information Orderly handles
Orderly may process information provided by a workspace owner or authorized user, including:
- Account identity and contact information, authentication events, role, and workspace membership.
- Business records such as customers, suppliers, quotes, jobs, inventory, purchases, invoices, expenses, employees, time, mileage, recipes, and financial records.
- Documents uploaded to the service, including receipts and bill attachments.
- Technical and security information such as session identifiers, request metadata, audit events, rate-limit activity, error diagnostics, and anonymous website page-view information.
- Trial, setup, feature-usage, and aggregate adoption information used to operate and improve Orderly.
How information is used
We use information to create and secure accounts, deliver requested workflows, send requested business documents and authentication messages, provide support, prevent abuse, maintain audit and recovery records, understand product reliability, and meet legal obligations. Platform analytics are designed around aggregate adoption and activity signals rather than customer operational records, contacts, or financial amounts.
Who can access information
Workspace owners control who joins their organization and the access assigned to each person. Orderly applies organization-scoped database policies, server-side authorization, role and capability checks, focused employee sessions, privileged MFA requirements, and private document access controls.
Authorized Orderly operators access customer information only when required for support, security, recovery, or a customer-approved operation. Sensitive access should be narrowly scoped and recorded.
Service providers
Orderly relies on service providers that process data on our behalf, including Supabase for identity, database, and private storage; Vercel for application and website hosting; and Resend for transactional email. Providers may use their own subprocessors and operate systems in the United States or other locations permitted by their terms.
We use Vercel Web Analytics for aggregate website measurements such as page views, referring sites, device type, and approximate geography. It is configured without third-party advertising cookies and is not used to identify individual visitors or follow them across unrelated websites. We do not send names, email addresses, customer records, or financial information as analytics properties.
Security and recovery
Orderly uses verified identity, organization-level row security, role-aware authorization, private storage, encrypted transport, verified database connections, rate limiting, audit records, and backup procedures. No online service can promise absolute security. If a material incident affects pilot customer information, we will investigate, contain the issue, preserve evidence, and communicate known impact to affected contacts.
Retention, export, and deletion
Active workspace data is retained while needed to provide Orderly. Security, audit, financial-source, and recovery records may be retained when reasonably necessary for integrity, fraud prevention, contractual, or legal purposes. Production database backups are maintained on a rolling provider schedule and are not selectively edited; deleted information may remain in restricted backups until those backups expire.
An organization owner may request a data export or workspace deletion by contacting admin@useorderly.app. We verify the requester and exact workspace before acting. A final protected export is offered before deletion, and the owner must explicitly confirm destructive deletion.
Customer responsibilities
Workspace owners determine what business and employee information they enter, who may access it, and whether they have a lawful basis to process it. Do not upload unnecessary sensitive personal information, payment-card data, health information, government identification documents, or credentials.
Your choices
Authorized users may correct many records within Orderly. Organization owners may request access, correction, export, or deletion assistance. Authentication and operational emails necessary to use the service are not marketing subscriptions.
Children
Orderly is a business service and is not directed to children under 13.
Changes and contact
We may update this notice as the service changes. Material updates will be reflected by a revised effective date and, when appropriate, direct notice to active pilot owners. Questions or requests may be sent to admin@useorderly.app.