Privacy Policy

Effective date: 2026-06-10
Contact: privacy@ordomark.com

This policy explains what OrdoMark collects when you use the web application at ordomark.com and app.ordomark.com, what we do with it, who we share it with, and the controls you have.

This policy covers the OrdoMark web application. The OrdoMark Connector browser extension has its own policy that describes the data flows specific to the extension; if you use it, please read both. The extension policy is available at the OrdoMark Connector privacy policy.

If you have a privacy question, a data request, or a concern, write to privacy@ordomark.com.

Who we are

OrdoMark is a workflow and fulfillment management platform for Etsy sellers. We import the Etsy order data you authorize and provide tools to organize orders into production batches, build workflows, assign tasks to team members, and track fulfillment progress. OrdoMark is intended solely for operational management after an order has been placed. We do not create or modify Etsy listings, manipulate search rankings, automate reviews, generate buyer activity, or perform any marketplace optimization.

Summary

• We collect what we need to operate the platform: account info, organization and team data, your OrdoMark Connector extension keys, and the order data you authorize.
• We never see your Etsy password. The OrdoMark Connector browser extension reads orders from the Etsy seller dashboard you’re already logged into.
• We do not sell your data, share it with advertisers, or use it to train third-party machine learning models.
• The application is hosted on Google Cloud in the us-central1 region (Iowa, USA).

What we collect

Account information

• Your name and email address
• A hashed password (we use bcrypt; we never store the plaintext)
• The role you sign up under (for example, organization admin or team member)
• Authentication metadata such as login timestamps and IP addresses for security purposes

Organization and team information

• Organization name and business profile
• Any settings the organization admin configures, such as workflow definitions, batching criteria, and task templates
• Team member accounts, their roles, and task assignments within the organization

Etsy connection data

• The extension API key you generate to authorize the OrdoMark Connector browser extension (encrypted at rest with AES-256-GCM)
• Shop ID, shop name, shop URL, and the display name of the shop owner as read from your Etsy seller dashboard
• The shop email address as shown on your dashboard, when available

Order data

• Order identifiers, dates, status, and payment status as reported by Etsy
• Line items (product title, SKU, quantity, price, variations, and personalization details)
• Shipping address, including buyer name, address lines, city, state, zip, and country
• Buyer display name, buyer email (where Etsy exposes it), and any gift message
• Total amount, item subtotal, shipping cost, tax, and any discounts
• Fulfillment and tracking information you record while processing the order
• The production batches, workflow stages, and task assignments you associate with an order inside OrdoMark

Support correspondence

When you email us or reach out through a support channel, we keep a record of the conversation so we can respond and follow up.

Technical data

We collect ordinary server-side data needed to operate the service: request logs, error traces, IP addresses on authenticated requests, and timestamps. This data is used for security, debugging, and abuse prevention.

What we do not collect

• We do not store your Etsy password. The OrdoMark Connector extension reads orders from pages you’re already logged into.
• We do not collect data from any website outside of the OrdoMark application and the Etsy connection you authorize.
• We do not run third-party advertising or behavioral-tracking SDKs in the application.

How we use your data

• Operate the platform: create your account, import the order data you authorize, organize it into production batches, run workflows, assign tasks, and track fulfillment progress
• Send transactional email: account invitations, password resets, and relevant operational notifications
• Provide customer support
• Detect and prevent fraud, abuse, and security incidents
• Comply with our legal, tax, and accounting obligations
• Improve the product based on aggregate usage patterns

We do not use your data:

• For third-party advertising
• To train machine-learning models that are not part of the OrdoMark product you signed up for
• To create or modify your Etsy listings, influence search rankings, automate reviews, or generate buyer activity

Subprocessors

If we add or replace a subprocessor, we will update this list and, for material changes, give notice as described in the Changes to this policy section.

How long we keep your data

We retain personal and account data for as long as your account is active.

When an account is deleted:

• Active personal data is removed from production systems within 30 days of the deletion request, with a short grace window for backups.
• Encrypted database backups are rotated out within 30 days of the deletion.
• Records we are required to keep for tax, accounting, or legal reasons are retained for as long as the applicable law requires, in restricted, audit-logged storage.
• Audit logs and security records are retained for the period required by law or our security policy, whichever is longer.

If you want a copy of your data before deletion, request it at privacy@ordomark.com before submitting the deletion request.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct information that is wrong or out of date
• Delete your account and the personal data associated with it (subject to the records-retention described above)
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent for processing that depends on consent
• Lodge a complaint with a supervisory authority (for users in the EU, UK, or other jurisdictions with a data-protection regulator)

To exercise any of these rights, write to privacy@ordomark.com. We respond to verified requests within 30 days. We will not discriminate against you for exercising a privacy right.

International data transfers

OrdoMark’s application and database run on Google Cloud in the us-central1 region (Iowa, USA). If you are located outside the United States, your data is transferred to and processed in the United States.

For users in the EU, UK, or other jurisdictions that require a transfer mechanism, the transfer is supported by the European Commission’s Standard Contractual Clauses (SCCs). By using OrdoMark, you consent to that transfer.

Cookies and similar technologies

• Authentication. Session and JWT/refresh tokens to keep you logged in.
• Security. CSRF tokens to protect against cross-site request forgery.
• Preferences. Lightweight UI preferences such as the active dashboard tab.

We do not run third-party advertising cookies, and we do not embed third-party tracking pixels for ad networks or social platforms.

Children

OrdoMark is a B2B product intended for businesses. It is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@ordomark.com and we will remove the relevant account data.

Security

• TLS in transit for all API and web traffic
• AES-256 encryption at rest for extension keys and other secrets
• bcrypt password hashing
• JWT-based access tokens with short expiry, plus refresh tokens
• Role-based access control scoped by Organization
• Audit logging on sensitive operations
• Secret management via Google Cloud Secret Manager

No system is perfectly secure. If you believe your account has been compromised, contact us at privacy@ordomark.com immediately.

The browser extension

The OrdoMark Connector browser extension has its own data flows because it runs inside your browser, on your Etsy seller dashboard. Those flows are described in detail in the extension privacy policy.

In short: the extension reads the order and shop data needed to import your orders from the seller-dashboard pages you already see while you’re logged into Etsy, and it sends that data to your OrdoMark account at api.ordomark.com. Once that data has reached OrdoMark, this policy governs it.

Changes to this policy

We may update this policy as the product changes. If a change materially affects what we collect or how we use it, we will:

• Update the Effective date at the top of the policy
• Post a notice in the application before the change takes effect
• For account-affecting changes, send an email to the address on your account

Continued use of OrdoMark after a change takes effect means you accept the updated policy. If you don’t accept the change, you can close your account at any time.

Contact

OrdoMark
privacy@ordomark.com

← Back to home