1. Introduction
Ordaze ("we", "us", "our") operates the Ordaze analytics event management platform at app.ordaze.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service.
2. Information We Collect
We collect the following information:
- Account information: name, email address, and profile picture provided by Google OAuth
- Usage data: analytics event definitions, workspace configurations, and team membership data you create in the platform
- Billing information: payment details are processed by Stripe and we store only your Stripe customer ID
- Technical data: error reports via Sentry (browser type, page URL, stack traces) to improve service reliability
- Analytics data: page views, feature usage, and interaction data collected via Google Analytics (only with your consent)
3. How We Use Your Information
- To provide and maintain the Ordaze service
- To authenticate your identity via Google OAuth
- To process payments and manage subscriptions
- To send transactional emails (invitations, payment notifications)
- To diagnose and fix technical issues
- To understand how users interact with Ordaze in order to improve the product (analytics only with consent)
4. Data Sharing
We do not sell your personal data. We share information only with the following third-party services necessary to operate Ordaze:
- Google: OAuth authentication and, with your consent, analytics via Google Analytics and Google Tag Manager
- Stripe: payment processing
- Sentry: error monitoring
- Resend: transactional email delivery
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it. Google Analytics data is retained for 14 months (Google's default retention period).
6. Your Rights
Under GDPR and applicable data protection laws, you have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: correct inaccurate personal data
- Erasure: request deletion of your personal data
- Portability: export your data in a portable format
- Object: object to processing of your personal data
- Withdraw consent: withdraw analytics consent at any time via the Cookie settings link in the footer of any page
To exercise any of these rights, contact us at [email protected].
7. Security
We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), secure authentication (OAuth 2.0), and access controls.
8. Cookies and Analytics
Essential cookies
We use session cookies required for authentication. These cannot be disabled as they are necessary for the service to function.
| Cookie | Purpose | Duration |
|---|
| authjs.session-token | Maintains your authenticated session | 30 days |
| ordaze_consent | Stores your cookie consent preference | 1 year |
Analytics cookies (optional, consent required)
With your consent, we use Google Analytics 4 (via Google Tag Manager) to collect anonymised usage data. This helps us understand which features are used most and where we can improve. We do not use this data for advertising.
What Google Analytics collects: pages visited, session duration, approximate geographic region (country / city level), browser and device type, referral source, and in-app events such as feature usage. IP addresses are anonymised before storage.
Google Tag Manager is used to load Google Analytics and manage tracking scripts from a single interface. GTM itself does not collect personal data; it only loads scripts that are configured within it.
Retention: Google Analytics data is retained for 14 months and then automatically deleted.
| Cookie | Purpose | Duration |
|---|
| _ga | Distinguishes unique users (Google Analytics) | 2 years |
| _ga_* | Maintains session state (Google Analytics 4) | 2 years |
| _gid | Distinguishes users within a 24-hour period | 24 hours |
Managing your cookie preferences
You can accept or reject analytics cookies at any time using the Cookie settings link in the footer of any page. Rejecting analytics cookies prevents Google Analytics and Google Tag Manager from loading entirely. You can also opt out of Google Analytics across all sites via Google's opt-out browser add-on.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page.
10. Contact
If you have questions about this Privacy Policy, contact us at [email protected].
Ordaze, Vilnius, Lithuania