Summary
We collect what we need to operate the platform: account info, organization data, marketplace connection tokens, order data, and payment metadata.
We never see your card numbers. Stripe holds them.
We never see your Etsy or Shopify password. We use OAuth tokens or extension-issued keys.
We do not sell your data, share it with advertisers, or use it to train third-party machine learning models.
The application is hosted on Google Cloud in the us-central1 region (Iowa, USA).
What we collect
Account information
Your name and email address
A hashed password (we use bcrypt; we never store the plaintext)
The role you sign up under (seller, manufacturer, or platform admin)
Authentication metadata such as login timestamps and IP addresses for security purposes
Organization information
Organization name and type (manufacturer or seller)
The organization’s business profile and any settings the organization admin configures
For manufacturers: a flag indicating whether the organization makes products directly or sources from another manufacturer (this is internal and never visible to sellers)
Relationship records linking manufacturers to sellers, and child manufacturers to parent manufacturers
Marketplace connection data
OAuth access tokens and refresh tokens (encrypted at rest with AES-256-GCM)
Shop ID, shop name, shop URL, and the display name of the shop owner as provided by the marketplace
The shop email address as reported by the marketplace, when available
Any extension API key you generate to authorize the OrdoMark Connector browser extension
Order data
Order identifiers, dates, status, and payment status as reported by the marketplace
Line items (product title, SKU, quantity, price, variations)
Shipping address, including buyer name, address lines, city, state, zip, and country
Buyer display name, buyer email (where the marketplace exposes it), and any gift message
Total amount, item subtotal, shipping cost, tax, and any discounts
Tracking numbers and carrier information once shipment is recorded
Per-order fee breakdown (wholesale price, manufacturer price, markup, OrdoMark fees, Stripe fees, and payout amounts) which we retain as an immutable audit record
Payment data
Payments are processed through Stripe. OrdoMark stores:

A Stripe Customer ID for each seller
A Stripe Connected Account ID for each manufacturer
Identifiers for individual payment intents, charges, and transfers
Payout amounts and statuses
OrdoMark does not receive, store, or process card numbers, bank account numbers, or full payment credentials. Those are held by Stripe under their own security and compliance controls.

Support correspondence
When you email us or reach out through a support channel, we keep a record of the conversation so we can respond and follow up.

Technical data
We collect ordinary server-side data needed to operate the service: request logs, error traces, IP addresses on authenticated requests, and timestamps. This data is used for security, debugging, and abuse prevention.

What we do not collect
We do not collect or store your card number, CVV, or bank account number. Stripe holds them.
We do not store your Etsy, Shopify, or Amazon password. We use OAuth tokens or extension-issued keys.
We do not collect data from any website outside of the OrdoMark application and the marketplace connections you authorize.
We do not run third-party advertising or behavioral-tracking SDKs in the application.
How we use your data
Operate the platform: create your account, route incoming orders, calculate fees, charge sellers, and pay manufacturers
Push tracking information back to the marketplace where the order originated, so the buyer is notified the same way they would be on any other order
Send transactional email: account invitations, password resets, order notifications, and order status updates
Provide customer support
Detect and prevent fraud, abuse, and security incidents
Comply with our legal, tax, and accounting obligations
Improve the product based on aggregate usage patterns
We do not use your data:

For third-party advertising
To train machine-learning models that are not part of the OrdoMark product you signed up for
For credit scoring or any lending decision