Privacy Policy

Ordo is local-first by design: the product’s core promise is that your trading data stays on your machine. This policy explains the limited data we do process, under the Turkish Personal Data Protection Law (KVKK) and the EU General Data Protection Regulation (GDPR).

1. Data the apps do NOT collect

The Ordo desktop and iOS apps store your journal — trades, notes, screenshots, statistics — in local files on your device. We have no server that receives your journal and no analytics inside either app. Optional integrations (broker connections, desktop-to-iPhone sync) run over your local machine or local network only.

The desktop app keeps your journal without an account. Signing in is what attaches your plan, and on Cloud and Pro it is what connects broker sync. The iPhone app does: you sign in, and we hold that account — an e-mail address (or the identifier Apple or Google gives us), a user ID and two dates. Your journal is still not part of it. The full detail is in the iOS privacy policy, which is the policy that governs the iPhone app.

2. Data the website collects

• Anonymous usage analytics — ordojournal.com uses Vercel Web Analytics and Speed Insights, which are cookie-free and do not track you across sites. We see aggregate page views and performance metrics, not identified individuals.
• Server logs — our hosting provider (Vercel Inc., USA) processes IP addresses transiently to serve the site and prevent abuse.

3. Data processed when you buy

Purchases are handled by our merchant of record, Paddle. The contracting entity depends on where you are: Paddle.com Market Limited (England and Wales, company number 8172165, 30 Old Bailey, London EC4M 7AU) for most of the world, Paddle.com Inc. in the United States, and Paddle.com (Canada) Ltd. in Canada. Paddle collects your email, billing details and payment method to process the order and handle taxes — see Paddle’s privacy policy. We receive your email address and subscription status so we can provide support and unlock your plan; we never see your card details.

4. Data processed when you contact us

If you email support@ordojournal.com, we keep the correspondence to resolve your request. Our mailbox is hosted on a Turkish corporate email provider.

5. Third parties

• Vercel Inc. (USA) — website hosting, analytics
• Paddle (UK/USA/Canada) — merchant of record: payments, receipts, tax
• Natro / teamblue (Türkiye) — domain and email hosting
• Supabase Inc. (USA) — sign-in and the account record for the iPhone app only; it never receives your journal

We do not sell or share personal data with advertisers.

6. Retention

Support emails are kept for up to 2 years. Website analytics are aggregate and contain no personal identifiers.

Order records are kept by Paddle per its legal obligations, and we keep our own copy of them: which Paddle customer and subscription you are, what plan and what status. While your account exists we also keep the email address the purchase was made under. We keep the record for as long as we may need to account for the payment.

Deleting your account does not delete that billing record, and that is deliberate — we cannot un-take a payment. What deleting your account on this site does remove is the sign-in account itself, your profile and your username. The billing record stops being attached to an account and is not used for anything except accounting and answering your own questions about it.

Your profile picture is deleted as well, and it is worth saying exactly how, because it is the one part that can fail. The image is a file in storage rather than a field on your account, so it is removed in a separate step, and that step can be refused or left half-finished. We do not report that as success: when we cannot confirm the file is gone, the deletion screen says so at the time — including that the picture may still load for anyone holding its direct link — and asks you to email support@ordojournal.com, and we then delete it by hand. The picture is removed before the account, so if the deletion of the account itself fails — which the screen also tells you — the picture may already be gone while the account is still standing.

7. Your rights

Under KVKK and GDPR you may request access, correction, deletion or portability of your personal data, and object to processing. Email support@ordojournal.com — we respond within 48 hours and resolve requests within 30 days.

8. Changes

Updates to this policy appear on this page with a new date. Material changes will be highlighted on the site.