📜 Ordliy Privacy Policy

1. Information We Collect

We collect and process only the information necessary to provide and improve our service:

• Uploaded Content: Images or documents you send to the Ordliy API.
• Schema Data: JSON payloads describing the fields or information you want extracted.
• Metadata: Request logs such as IP address, timestamps, API key, and country code.
• Usage Data: Aggregated information on request volume, latency, and performance.

We do not intentionally collect personally identifiable information unless it is contained in uploaded content provided by you.

2. How We Use the Data

We use your data only to:

• Process API requests and return structured results.
• Ensure reliability, prevent abuse, and improve performance.
• Debug and optimize our extraction models.
• Comply with legal obligations or law-enforcement requests.

We never sell or use your uploaded content for marketing or unrelated model training.

3. Use of AI Models and Subprocessors

Ordliy uses secure third-party infrastructure to analyze uploaded content:

Google Gemini processes data strictly under Ordliy's instructions and does not use uploaded content to train models. For details, see Google Cloud's Data Processing and Security Terms.

4. Data Retention and Deletion

• Uploaded content is automatically deleted within 7 days of upload (or sooner on paid plans).
• Logs and metadata are kept for up to 30 days for debugging and security.
• You may request deletion at any time by emailing [email protected] with your API key or request ID.

5. Security

We use industry-standard measures, including:

• TLS 1.2+ encryption for all traffic
• Encrypted storage for temporary files
• Access controls and role-based security
• Cloudflare WAF and regional blocking for compliance

6. International Data Transfers

Data may be processed in the United States or the European Union under the Standard Contractual Clauses approved by the European Commission.

We ensure all subprocessors follow equivalent privacy and security standards.

7. Your Rights

Depending on your jurisdiction, you may request to:

• Access, correct, or delete your data
• Restrict or object to processing
• Receive confirmation of deletion

To exercise these rights, contact [email protected].

8. Children's Data

Ordliy is not intended for children under 16 and does not knowingly process their data.

9. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted here with an updated effective date.

10. Contact

For questions or privacy requests, contact:

📧 [email protected]
🌐 ordliy.com