Privacy Policy

1. What we collect

• Account info: your email, used for login and account access.
• Business info you submit: business name, website, social profiles, and anything else you share for your audit or inside the Hub.
• Audit and Hub data: your health score, findings, goals, wins, and chat messages with our support.
• Payment info: handled entirely by Paddle, our merchant of record. We never see or store your full card details.

2. How we use it

To generate your audit, run your Hub, respond to you directly, and improve Ornit itself. Once we have enough members, we may use fully anonymized, aggregated data (never tied back to your specific business) to show category-level benchmarks. For example, "coaches in your niche who raised prices saw X." We won't do this with identifiable data, and competitors in the same niche won't be shown to each other.

We do not sell your data to advertisers or third parties.

3. Who else sees it

We use a small number of trusted service providers to run Ornit:

• Supabase: hosts our database and handles account login
• Paddle: processes payments and billing
• Resend: sends transactional emails (like your audit results)
• Cloudflare Turnstile: verifies real visitors on our public forms
• PostHog: anonymized product analytics, to understand how Ornit is used

Each only receives what it needs to do its job. We don't hand over more than necessary.

4. Cookies

We use a small number of cookies for login sessions, bot verification, checkout, and anonymized analytics. None are used for third-party advertising.

5. Your rights: access, export, and deletion

You can request a full export of your data, or full deletion of your account and data, at any time. Just message us directly through the Hub or email support@ornit.co. We commit to completing any request within 30 days, and usually much sooner.

Deletion removes your account and all associated business data, goals, wins, and chat history from our systems, except where we're legally required to retain billing records.

6. Data retention

We keep your data for as long as your account is active, plus a reasonable period after cancellation in case you return, unless you request earlier deletion.

7. Security

Your data is protected with row-level access controls, so no member can see another member's business data. We take reasonable technical measures to keep your data safe, but no system is 100% guaranteed secure.

8. Children's privacy

Ornit is intended for business owners and isn't directed at anyone under 18.

9. International use

Ornit is operated from India. Some of our service providers store or process data outside your home country. By using Ornit, you consent to this transfer.

10. Changes to this policy

We'll notify you directly of any material change, not just post a silent update.

11. Contact

Questions about your data: message us through the Hub, or email support@ornit.co.