Privacy Policy

1. Who we are

ORMDO (“ORMDO”, “we”, “us”) is an outsourced marketing, reputation management and digital optimization service operated by [Legal Entity Name], registered at [Registered Address]. This policy explains what information we collect through our website and client portal, and how we use it.

2. Information we collect

We collect information in three broad categories:

• Website visitors: name, email, phone and message content submitted through our contact / free-audit form.
• Portal users (clients and team): account credentials, onboarding responses (goals, target audience, brand voice, competitors), uploaded brand and content assets, messages and comments left inside the portal, and basic usage data (login times, actions taken).
• Your customers' contacts: where you connect WhatsApp, email or social accounts, we process the contact lists and messages needed to run the campaigns you request. You are responsible for having the necessary consent from your own customers before we contact them on your behalf.

3. How we use information

• To provide and operate the services you've engaged us for
• To respond to inquiries and schedule strategy calls
• To manage your account, content calendar and campaigns
• To generate the reports and analytics shown in your dashboard
• To improve our services and troubleshoot issues
• To meet legal and regulatory obligations

4. Third-party services we use

We rely on the following processors to run the platform. Each has its own privacy policy governing how they handle data on our behalf:

• Vercel — application hosting and infrastructure
• Prisma Postgres — database storage
• Vercel Blob — file and media storage
• Meta Platforms (Instagram, Facebook, WhatsApp Business Platform) — social publishing and messaging, when you connect these accounts
• LinkedIn — social publishing, when you connect this account
• Brevo — email delivery, when configured
• Anthropic — AI-assisted content suggestions and visibility checks, when configured

5. Cookies

Our portal uses a single essential, first-party session cookie (httpOnly, not readable by scripts) to keep you signed in. We do not currently use third-party advertising or analytics cookies.

6. Data retention

We retain account and campaign data for as long as your engagement is active, and for a reasonable period afterward for record-keeping and legal purposes, after which it is deleted or anonymized on request.

7. Data security

Passwords are hashed, not stored in plain text. Access to client data inside the portal is restricted by role — clients can only see their own organization's data. Connected-account access tokens are never displayed in full once saved.

8. Your rights

You may request access to, correction of, or deletion of your personal data by contacting us at [privacy@ormdo.com]. We will respond within a reasonable timeframe consistent with applicable law.

9. Children's privacy

Our services are intended for businesses and professionals. We do not knowingly collect information from children.

10. International data transfer

Our infrastructure providers may process and store data outside your country of residence, including in the United States.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

12. Grievance Officer

In accordance with applicable Indian data protection rules, grievances may be addressed to: [Grievance Officer Name], [Grievance Officer Email].

13. Contact us

Questions about this policy? Contact us or write to [privacy@ormdo.com].