Privacy Policy

Information we process

We process account names, email addresses and sign-in identifiers; business services, staff and opening hours; client names and contact details; appointments and related calendar identifiers; messages, preferences and consent records; and assistant proposals, approvals and action history. We also process technical records needed to diagnose failures, secure accounts and prevent duplicate bookings or messages. Please use fictional client details and contact numbers you control during testing, and avoid sending sensitive personal information that is not needed for a booking.

How information is used

We use this information to sign you in, display availability, create and manage bookings, answer business questions, deliver authorized messages and investigate errors. Business owners and authorized team members can view relevant client records and conversations. The assistant uses configured business information and application permissions; owner actions that require approval are recorded before execution. Essential session cookies maintain sign-in and security.

Connected providers and AI

• Google provides sign-in and, when authorized, Calendar availability and event updates. We store the credentials needed to maintain that authorized connection.
• Meta's WhatsApp Business Platform processes phone identifiers, messages and delivery events sent through the connected service number.
• The configured AI provider, OpenAI or Anthropic, receives relevant message content and business context to interpret requests and draft responses. Do not include information you do not want processed by that provider.
• Google Cloud hosts the testing infrastructure. Configured email and payment providers process information needed for their enabled features; payment card details are handled by the payment provider.

Provider processing and retention follow their respective terms and privacy policies. Google API data is used for the connected user-facing features, not advertising or training generalized AI models. Our use and transfer of Google API information follows the Google API Services User Data Policy, including its Limited Use requirements. We do not sell personal information.

Security and access

Hosted connections use HTTPS. Business data is separated through tenant-scoped database access and role permissions. Credentials and selected sensitive data are encrypted at rest. Access is limited to authorized users and operators who need it to run or support the service. Information may be processed in countries where our providers operate.

Retention and your choices

Test records remain until removed by an authorized operator; an automatic deletion schedule for all test data is not currently configured. Security, consent and transaction records may need separate retention, and backup copies follow their backup retention settings. Deleting information in Ordane does not automatically erase copies already held in WhatsApp, Google Calendar or another provider.

You can disconnect Google access through your Google account, ask the business to correct a record, and use STOP to opt out of automated WhatsApp messages. To request access, correction, export or deletion, follow our data deletion and privacy request instructions. We may ask for information needed to verify that the request concerns your own data.