Privacy Policy

1. Who We Are

Ordira is an AI commerce operating system operated by Veritas Global Technologies Ltd (RC No. 7950823, Corporate Affairs Commission of Nigeria), with registered offices at 59, Ajayi Road, Ikeja, Lagos State, Nigeria.

When you create an account, connect a business channel, or interact with the platform, you entrust us with information needed to run the service. This policy explains what we collect, why we collect it, and how we protect it.

Our privacy contact is hello@tryordira.com.

2. What Information We Collect

We collect the information genuinely needed to operate and improve the service.

Account and business details

When you sign up, we collect information such as your name, email address, business name, phone number, and billing details required to manage your account.

Catalog and operational data

To run your workflows, we store catalog data, prices, categories, fulfillment settings, merchant policies, and other business rules that you configure.

Conversation and workflow data

When customers message your business through the platform, we receive and store conversation history, transaction context, workflow events, and customer contact information required to keep the workflow moving.

Transaction and payment records

We store transaction records and payment events needed to confirm commerce activity and support merchant operations. We do not store full card numbers or sensitive payment credentials.

Usage and technical data

We collect technical information such as browser type, device information, session activity, and IP address to improve performance and keep the platform secure.

3. Google User Data

This section explains exactly how Ordira handles information it receives from Google when you choose Sign in with Google. It applies to the Ordira mobile app and the Ordira web dashboard.

What Google user data we access

When you sign in with Google, and only with your permission, Google shares with Ordira:

• your name
• your email address and whether Google has verified it
• your profile picture
• a unique Google account identifier

Ordira requests only the basic sign-in permissions (openid, email and profile). We do not request or access your Gmail, Google Contacts, Google Calendar, Google Drive, or any other Google data.

How we use Google user data

We use this information only to provide sign-in and your account:

• to create your Ordira account, or find your existing account, and sign you in
• to show your name and picture to you and to the team members of the businesses you belong to
• to send you service emails about your account, such as security notices

We do not use Google user data for advertising, we do not sell it, we do not use it to build profiles for any other purpose, and we do not use it to develop, improve or train AI or machine-learning models.

How we share, transfer or disclose Google user data

We do not share Google user data with third parties, except:

• with the infrastructure providers that host Ordira's servers and databases, only to run the service and under contracts that require them to protect it
• within a business on Ordira, where your name and picture are shown to the people you work with, because you joined that business
• when required by law, as described in "How We Share Your Information"

We never transfer Google user data to data brokers, advertising platforms or AI model providers.

How we store and protect Google user data

Google user data is stored in Ordira's account database. It is encrypted in transit (TLS) and at rest, access is limited to authorised personnel who need it to operate the service, and access is logged. We never see or store your Google password, and the sign-in token Google gives the app is checked once and not kept.

How long we keep it and how to delete it

We keep your name, email address, picture and Google account identifier for as long as your Ordira account is open. When you delete your account, or ask us to, we delete this data within 30 days. You can also:

• remove Ordira's access to your Google account at any time at https://myaccount.google.com/permissions, after which Ordira can no longer receive data from Google
• ask us to delete your data by emailing hello@tryordira.com

Limited Use

Ordira's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Sign in with Apple

Sign in with Apple works the same way: Apple shares your name and email address (or a private relay address), and we handle it exactly as described above.

Changes

If we ever change how Ordira accesses, uses or shares Google user data, we will update this section and tell you in the app and by email before the change takes effect.

4. AI Features

Ordira uses AI agents to answer customers on WhatsApp and Instagram, to answer your team's questions about the business, and to help you add items to your catalog.

What the AI works with

The agents work with the business data you put into Ordira: your catalog, prices, stock, orders and the conversations customers start with your business. Every figure an agent shows comes from your records; AI never sets prices, confirms payments or changes your business without a person confirming it.

Photos and voice

When you photograph an item, the photo is analysed to suggest a name and description, and it is stored as part of your catalog. When you speak to the app instead of typing, the recording is transcribed and then discarded; only the text is kept.

Our AI providers

To provide these features we send only the data each feature needs to AI service providers, including Anthropic and Google. Ordira does not use your data to train AI models, and we use our providers' business offerings, which do not use it to train theirs.

What Ordira will not do

Ordira does not generate images or video of people, and the platform may not be used to create or share sexual or intimate imagery of anyone, including AI-generated imagery of real people without their consent.

5. How We Use Your Information

We use the information we collect for the following purposes:

Running the service

Your business data, configured tools, and conversation history are used to power chat-commerce workflows, process transactions, and coordinate merchant operations.

Improving the platform

Aggregated and anonymised usage data helps us understand what is working, where friction exists, and what should be improved next.

Billing and account management

We use billing information to manage subscriptions, issue receipts, and send service-related account communications.

Security and fraud prevention

Technical data helps us detect suspicious activity, prevent unauthorised access, and protect merchants and customers using the platform.

Legal compliance

Where required, we use data to meet our obligations under applicable laws and regulations.

6. How We Share Your Information

We do not sell or rent your data.

Infrastructure and service providers

We work with trusted providers for hosting, databases, payment processing, email delivery, and analytics. They only receive the minimum data needed to perform their function.

Meta (WhatsApp Cloud API)

Our messaging infrastructure depends on Meta. Message delivery, phone verification, and webhook events are processed through Meta's systems according to their platform rules.

Legal requirements

If required by law, court order, or regulatory obligation, we may disclose relevant information. Where legally permitted, we will notify you first.

Business transfers

If Ordira is acquired, merged, or restructured, data may transfer as part of that transaction. You will be informed before the transfer takes effect.

7. Data Security

We apply layered security controls across the platform:

• All data is transmitted over encrypted connections
• Sensitive credentials are stored in secure systems, not exposed in plain text
• Access to production systems is restricted to authorised personnel
• We monitor for suspicious behaviour and conduct periodic security reviews

No platform can guarantee absolute security. If a breach affects your data, we will notify you promptly and explain the remediation steps taken.

8. Data Retention

We retain data for as long as your account remains active or as long as it is needed to provide the service you are using.

When you close your account, we will permanently delete or irreversibly anonymise your personal data within 30 days, except where longer retention is required by law, such as financial transaction records.

Conversation data and order history associated with your account will be removed on the same schedule unless you export it beforehand.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or outdated information
• Request deletion of your data, subject to legal retention rules
• Receive your data in a portable format
• Restrict or object to certain kinds of processing
• Withdraw consent where processing relies on consent

To exercise any of these rights, email hello@tryordira.com. We may need to verify your identity before taking action.

10. Cookies and Tracking

We use cookies and similar technologies to operate and improve the platform.

Essential cookies

These are required to keep the dashboard functioning, including authentication and session continuity.

Analytics cookies

These help us understand how merchants use the product so we can improve it. They can typically be controlled through your browser settings or preference tools where available.

We do not use third-party advertising cookies or sell browsing behaviour to ad networks.

11. Third-Party Links

Ordira may link to external services such as payment pages or partner tools. Once you leave our platform, this Privacy Policy no longer applies. Review the policies of any third-party service you use in connection with Ordira.

12. Age Restrictions

Ordira is intended for adults operating legitimate businesses. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through the platform, contact us and we will investigate promptly.

13. Changes to This Policy

We may revise this Privacy Policy as the product or legal requirements evolve. When changes are material, we will notify you and update the "Last updated" date on this page.

Continuing to use Ordira after a policy update means you acknowledge the revised terms.

14. Contact Us

If you have questions or requests related to this Privacy Policy, contact us:

Email: hello@tryordira.com Response time: We aim to respond within 5 business days.

Operating Entity: Veritas Global Technologies Ltd RC No. 7950823 (Corporate Affairs Commission, Nigeria) 59, Ajayi Road, Ikeja, Lagos State, Nigeria