This policy explains how Ordix LLC ("Ordix", "we", "us") handles information when you visit ordixit.com, use the Ordix software, or connect an account to it.
Who we are
Ordix LLC is a Delaware limited liability company that provides white-label marketing software to marketing agencies. Contact us at [email protected] or by mail at [Ordix mailing address].
Whose data this covers
- Website visitors who browse ordixit.com or send us a request.
- Agencies that hold an Ordix account, and their staff.
- Agency clients whose accounts are connected to an agency's Ordix workspace.
When we process an agency client's data, we do so on behalf of the agency, which decides how that data is used. If you are an agency client, you may also contact your agency directly about your data.
What we collect
Information you give us
- Contact details you send through our forms or email, such as your name, agency, work email and a website you want audited.
- Account details, such as user names, email addresses, roles and agency branding settings.
- Billing details. Payments are processed by Stripe; we do not store full card numbers.
Information from accounts you connect
When you connect an account, you sign in with that provider and choose to grant access. We receive only what the permissions you approve allow.
| Connected service | What we access | Why |
|---|---|---|
| Google Search Console | Search performance data, sitemaps, indexing and security issue reports for sites you choose | SEO dashboards, audits and reports |
| Google Analytics 4 | Traffic and conversion reports for properties you choose | Showing results by page, keyword and campaign |
| Google Ads | Campaign settings, spend and performance; changes you or your agency request | Paid media dashboards, budget alerts and approved changes |
| Google Business Profile | Business listings, posts and reviews for locations you choose | Local SEO and review management |
| Meta (Facebook and Instagram) | Ad account, campaign and performance data; Pages you choose | Paid media and social dashboards, scheduled posts |
| TikTok, LinkedIn and Microsoft Ads | Ad account, campaign and performance data | Paid media dashboards |
| WordPress and Webflow | Page content, SEO fields, redirects and site file changes | Site audits and applying approved fixes |
Information collected automatically
- Basic technical data such as IP address, browser type and pages visited, kept in server and security logs.
- Essential cookies that keep you signed in. See Cookies.
How we use it
- To provide the Ordix software: dashboards, audits, fix queues, reports and the features you turn on.
- To make changes you or your agency approve, such as a redirect on a website or a budget change in an ad account.
- To reply to requests, provide support and send service messages.
- To bill for the service.
- To keep the service secure, prevent abuse and meet legal obligations.
We do not sell personal information, and we do not use data from connected accounts to advertise to anyone.
Google user data
Specifically, data we receive from Google APIs:
- is used only to provide and improve the user-facing features of Ordix that you or your agency use;
- is not transferred to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you;
- is not used or transferred for advertising, including retargeting or interest-based ads;
- is not sold, and is not used to determine credit-worthiness or for lending;
- is not used to develop, improve or train generalized artificial intelligence or machine learning models;
- is not read by people, unless you give us permission for a specific purpose such as support, it is needed for security or to comply with law, or it has been aggregated and anonymized for internal operations.
You can remove Ordix's access at any time in your Google Account at myaccount.google.com/permissions.
Meta platform data
Data received from Meta is used only to provide the features you connected it for, in line with Meta's Platform Terms. We do not sell it, and we do not use it to build profiles of individuals. To have this data deleted, follow the steps on our data deletion page.
Who we share with
- Your agency. Data in a client workspace is visible to the agency that runs it, according to the roles the agency sets.
- Service providers that run parts of Ordix for us under contracts that limit their use of the data: Amazon Web Services (hosting and storage), Cloudflare (website delivery and security), Stripe (payments), Resend (email delivery), Microsoft (business email), and, for AI features you turn on, AI model providers bound not to train on your data.
- Legal and safety. When required by law, or to protect the rights, safety or property of Ordix, our users or others.
- Business transfers. If Ordix is involved in a merger, acquisition or sale of assets, with notice to you and subject to this policy.
How long we keep it
- Data from a connected account is kept while the account stays connected and the workspace is active.
- When an account is disconnected or a workspace is closed, we delete its data within 30 days, and from backups within 60 days.
- Contact requests are kept for up to two years unless you ask us to delete them sooner.
- Billing records are kept as long as tax and accounting law requires.
Security
Access tokens for connected accounts are encrypted at rest and stored separately from other data. Data is encrypted in transit. Access is limited by role, and changes to ad budgets and live websites are logged. No system is perfectly secure; if a breach affects your information, we will notify you as the law requires.
Your choices and rights
- Disconnect any account from your Ordix workspace at any time.
- Ask us to access, correct, export or delete your personal information by emailing [email protected].
- California residents have the right to know, delete and correct personal information, and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined under California law.
- If you are in the European Economic Area or the United Kingdom, you may also object to or restrict processing, and complain to your local data protection authority.
We respond to requests within 30 days. We may need to confirm your identity first.
Cookies
Ordix uses only cookies needed to sign you in and keep the service secure. The ordixit.com marketing site does not use advertising cookies.
Other terms
Children. Ordix is a business service and is not meant for anyone under 18. We do not knowingly collect information from children.
Where data is stored. Ordix is operated from the United States, and data is stored in the United States.
Changes. If we change this policy, we will update the effective date above and, for material changes, notify account holders by email before the change takes effect.
Contact
Ordix LLC
[Ordix mailing address]
[email protected]