Privacy Policy

Who we are

Ordomatics is operated by Moctar Diallo, an individual entrepreneur based in Dakar, Senegal, who is the data controller for the personal data described here. You can reach us at salam@ordomatics.com.

Data we collect

• Account data: your email address and a securely hashed password when you sign up with email.
• Google sign-in data: when you sign in with Google, your email address, whether Google has verified it, and your basic profile. We never receive your Google password.
• Billing data: when you subscribe, our payment provider Stripe collects your payment details. We only keep your subscription status, plan, payment date and the customer reference Stripe gives us; we never see or store your card number.
• Messages you send us: the content of emails or WhatsApp messages you exchange with us.
• Technical data: IP address, browser type and request logs generated when you use the site, kept for security and troubleshooting.

How we use your data

We process your data because it is necessary to provide the service you asked for, to meet legal obligations, for our legitimate interest in running a secure service, or with your consent where the law requires it. We do not sell your personal data and do not use it for advertising.

• To create and secure your account and let you sign in.
• To send service emails such as email verification and password resets.
• To provide the services you subscribe to and manage your billing.
• To answer your questions and support requests.
• To protect the service against abuse and meet our legal obligations.

Who we share it with

We rely on the following service providers, who process data only on our instructions:

• Akamai (Linode): hosting of our servers in Frankfurt, Germany.
• Neon: our database, hosted on Amazon Web Services in Frankfurt, Germany.
• Resend: delivery of service emails, sent through Amazon SES in Ireland.
• Google: sign-in with Google, when you choose it.
• Stripe: payment processing, when you subscribe.
• Cloudflare: domain name (DNS) and email routing.

International transfers

Our servers are located in the European Union and some providers operate worldwide, so your data may be processed outside Senegal. We only use providers that apply appropriate safeguards to protect it.

How long we keep it

We keep your account data for as long as your account is active. When you ask us to delete your account, we delete your personal data within 30 days, except billing records we must keep by law. Technical logs are kept for a limited period for security purposes.

Security

Passwords are stored only as secure hashes, data is encrypted in transit, and access to our systems is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.

Your rights

Under Senegal's personal data law (Law No. 2008-12 of 25 January 2008), you have the right to access, correct and delete your personal data and to object to its processing. To exercise these rights, write to salam@ordomatics.com. You can also lodge a complaint with Senegal's personal data protection authority, the Commission de Protection des Données Personnelles (CDP).

Cookies and local storage

We keep your sign-in session in your browser's local storage so you stay logged in. We do not currently use analytics or advertising cookies; if we add analytics, we will ask for your consent first.

Children

Ordomatics is a service for businesses and is not intended for anyone under 18.

Changes to this policy

We may update this policy. We will change the date above and, for significant changes, notify you by email or on the site.

Contact

For any question about this policy or your data, write to salam@ordomatics.com.