Privacy Policy

Last updated October 4, 2026

Ordering Guru is a purchase-ordering tool for retail buyers. This policy explains what information the app collects, why, and who it is shared with. It covers the website, the web app and our iOS app, and any other apps we release. Your use of Ordering Guru is also governed by our Terms of Service.

Information we collect

• Account details. Your email address and password, used to sign you in. Authentication is handled by Supabase; passwords are stored only as salted hashes and are never visible to us. If you sign in with Google, we receive your email address and name from Google instead of a password. If you use Sign in with Apple in our iOS app, we receive your name (the first time only, and only if you choose to share it) and either your email address or, if you choose to hide it, a private relay address from Apple that forwards to you.
• Business contact details. The contact name, email address, phone number, company name, and store addresses you enter in Settings. These appear on the purchase orders you send so vendors know who placed the order and how to reach you.
• Your working data. The vendors, products, prices, promotions, and order history you create or import. This is the content of the service.
• Email sending settings. The outgoing mail server, username, password, and from and reply-to addresses you enter in Email Settings. We store them and use them only to send the purchase orders you ask us to send. Admins in your organization can view and change them.
• Activity records. An activity log of changes made in your organization, such as orders, users and settings, showing who made each change. Admins in your organization can see it.
• Payment information. If you buy a subscription on the web, payment is processed by Stripe. Card details go directly to Stripe and never reach our servers.

How we use it

We use your information to operate the service and nothing else: to sign you in, to keep your catalog and orders available across your devices, to build and send purchase orders, and to respond when you contact support. We also use it to keep the service secure and working — for example, to investigate errors — to prevent fraud and abuse, to enforce our Terms of Service, and where the law requires it.

Who we share it with

• Vendors you choose. When you send a purchase order, its contents and your business contact details are emailed to the recipients you select. You control who those recipients are.
• Your own email provider. Purchase orders are sent through the outgoing mail server you set up in Email Settings. We sign in to it with the details you provide, so your email provider handles those messages under its own terms.
• Service providers. Supabase (database, authentication, file storage, and server functions), Netlify (hosting for the website and web app), and Stripe (payments, web only). They process data solely on our behalf.
• Catalog import assistance. When you import a price list or promotion file and our automatic matching can't identify the columns it needs, the file's column headers and a few sample rows (currently three) are sent to OpenRouter, which routes them to a Google Gemini model, so the columns can be matched to the right fields. This applies only to files you choose to import. We don't use this data to train AI models, and no other part of your account — orders, contacts, or vendor records — is sent.
• Google and Apple. If you sign in with Google, Google handles that sign-in under its own privacy policy. If you use Sign in with Apple, Apple handles that sign-in under its own privacy policy. Apple also distributes our iOS app and handles App Store downloads under its own privacy policy.

We do not sell your information, we do not share it with advertisers, and we do not use it for advertising or cross-app tracking. The iOS and Android apps contain no third-party analytics or advertising SDKs.

Website analytics. Our website at ordering.guru uses Google Analytics to count visits and see which pages and sources bring people to us. It sets cookies in your browser and sends Google information such as the pages you view, your browser and device type, your approximate location, and the site that referred you. Google signals and ad personalization are turned off. You can opt out with your browser's cookie settings or Google's opt-out add-on. The native apps do not load Google Analytics.

Data retention and deletion

We keep your data for as long as your account is active. You can edit or delete your vendors, products, and orders at any time from within the app. To delete your account, open Settings → My Profile (in the iPhone and iPad app, open the menu and choose Account first) and choose Delete account under Danger Zone. If your account signs in only with Sign in with Apple, delete it from the iPhone or iPad app, where you confirm with Sign in with Apple. If you are your organization's owner, this deletes the whole organization and its data. If you are a member, it removes your login and profile; the orders and other records you created stay with your organization, and its activity log keeps the name or email shown for your past actions. Any residual copies in encrypted backups age out within 30 days. If you would rather we did it for you, or you are an admin who is not the owner, email info@cervinomgt.com from your account address.

If an organization has no active subscription and no one has signed in to it for 12 months, we may delete it after giving an admin at least 30 days' notice by email. We may keep limited records where the law requires it, or where we need them to resolve disputes, prevent fraud, or enforce our Terms of Service. Stripe keeps billing records under its own policies.

Security

All traffic between the app and our servers uses HTTPS. Data is stored on Supabase infrastructure with row-level security, designed so that each account can only read its own records. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

Ordering Guru is a business tool and is not directed at children under 13. We do not knowingly collect information from them.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you. Email info@cervinomgt.com and we will help.

Changes to this policy

If we make material changes we will update the date at the top of this page and, where appropriate, notify your organization's admins by email.

Contact

Questions about this policy or your data: info@cervinomgt.com.