Privacy policy

Who is responsible

Ordessa is run by Damian Van de Kauter, Belgium. For the personal data described here, that is the controller. Write to privacy@ordessa.org about anything in this policy.

A shop you order from receives your order and decides itself what it does with it at the counter; for that, the shop is responsible as well.

What this covers

The shop pages on ordessa.app, the Ordessa app, Ordessa Manager and the counter board, the API they use, this website, and the connectors through which an AI assistant reaches Ordessa.

Your account

• What: your name, email address, a one-way hash of your password, your role, and for a shop's account the company it belongs to.
• Why: to let you sign in and to keep what you do tied to you. Basis: performing our agreement with you.
• How long: as long as the account exists.

Signing in

• What: for every session, when it started and was last renewed, the device's browser or app identification (user agent) and IP address.
• Why: to keep you signed in, to detect a stolen session, and to let you see and end your sessions and connections. Basis: our legitimate interest in keeping accounts secure.
• On your device: the browser keeps your session and an anonymous cart identifier in its local storage; the apps keep the session in the device's keychain. Ordessa sets no cookies and uses no advertising or analytics trackers.

How long: a session's records are deleted 30 days after it was last used, or 7 days after you sign out or end it.

Your cart and your orders

• A cart holds which products and choices you picked and how many — no prices, nothing about you beyond the account or anonymous identifier it belongs to. An anonymous cart expires 7 days after it last changed; one that belongs to an account, 30 days after.
• A shared cart link holds the same, and stops working 30 days after it was made.
• An order holds what you ordered at the prices agreed, when you collect it, and the name, telephone number, email address and note you give. Why: so the shop can prepare it and hand it to you, and so you can follow it. Basis: performing the order.
• The shop you order from sees your order and the contact details on it.

How long: an order is the shop's record of what it sold, and is kept for as long as the shop uses Ordessa. It is not deleted when your account is. You can ask us to remove your name, telephone number and email address from your past orders at any time.

Notifications

If you allow notifications, the app's device token and your choices — when an order is being prepared, when it is ready — are stored with your account or order so the status can reach you. You can turn them off in the app or the device's settings. The device token is deleted when you turn notifications off or sign out.

AI assistants

You can connect an assistant such as ChatGPT or Claude to Ordessa Manager, to work on a shop's catalogue, or to Ordessa, to order. You decide whether to connect one, and you can end the connection at any time in the assistant's settings, and for Ordessa Manager also in Ordessa Manager under AI assistants.

• The assistant's provider receives your conversation. Ordessa does not: it receives only the requests the assistant makes — which tool, with which details — and answers them.
• When you connect: which application asked (its published name and web address), what you allowed it to do, and a connection record like a session's, with user agent and IP address.
• When it is used: Ordessa reads and changes only what your own account may. The catalogue tools return catalogue data, and introduce your account by name, role and company — not by email address. The ordering tools work with your cart and orders as described above.
• Ordessa does not record what you asked the assistant or what the tools answered.

What the assistant's provider does with your conversation is governed by its own terms and privacy policy, which you accepted with that provider. Ordessa does not choose the provider and does not send it anything you did not ask your assistant to fetch.

Server records

Our hosting and network providers record each request's time, address, IP address and user agent, to keep the service running and secure. These records are kept for at most 30 days.

Who else processes your data

These companies process data on our behalf and only as we instruct them:

• Railway — runs Ordessa's servers and database, and keeps the server logs.
• Cloudflare — handles Ordessa's domain names and network, serves this website and the shop pages, and stores product and shop pictures.
• Apple — delivers notifications to iPhones and iPads.

Where: Ordessa's servers and database are in the Netherlands, in the European Union. Railway, Cloudflare and Apple are companies based in the United States; where they handle data outside the European Economic Area, they do so under the safeguards in their data processing terms, such as the European Commission's standard contractual clauses.

Your rights

You may ask to see the personal data we hold about you, to have it corrected or deleted, to have its use restricted, to receive it in a portable form, and to object to its use. Write to privacy@ordessa.org from the address of your account; we answer within one month. You can also complain to the Belgian Data Protection Authority, at www.dataprotectionauthority.be.

Security

Passwords and tokens are stored only as one-way hashes, every connection is encrypted, and access is checked on every request. More on the security page.

Changes

When this policy changes, the new version is published here with its date. Version of 3 October 2026.