Privacy Policy | Ordoframe

Book a call

ORDOFRAME PRIVACY POLICY

Last Updated: October 31, 2026

This Privacy Policy describes how Ordoframe Inc., an Oregon corporation (“Ordoframe,” “we,” “us,” or “our”), collects, uses, discloses, and retains personal information in connection with the website located at www.ordoframe.com (the “Site”), the Ordoframe platform made available at app.ordoframe.com, with Share Links at view.ordoframe.com, or any successor address (the “Platform”), and the related services that we provide (collectively with the Site and the Platform, the “Services”). Capitalized terms used but not defined in this Privacy Policy have the meanings given to them in our Terms of Service, available at www.ordoframe.com/terms (the “Terms”).

1. Scope.

1.1 Scope. The Services are offered to businesses and are not offered to individuals acting in a personal, family, or household capacity. This Privacy Policy applies to personal information about: (a) visitors to the Site; (b) individuals who contact us, arrange a call with us, submit an RFQ to us for a Concept Package, or participate in our design partner program; (c) Authorized Users of the Platform; and (d) personnel of our customers, prospective customers, suppliers, and other business contacts.

1.2 Customer Content. Our customers enter RFQs, requirements, deal records, and other Content into the Platform. Content may include personal information about the personnel of our customers’ own customers and suppliers, such as names, titles, email addresses, and telephone numbers. We process personal information contained in Content on behalf of the applicable customer, as a “processor” or “service provider” under applicable privacy laws, in accordance with our agreement with that customer. This Privacy Policy does not govern the privacy practices of our customers. If your personal information is contained in Content, direct any questions or requests to the customer that entered it.

1.3 Third-Party Services. The Services may contain links to, or permit sign-in through, third-party websites and services, including Microsoft and Google. This Privacy Policy does not apply to those third parties, and their collection and use of personal information is governed by their own privacy policies.

2. Information We Collect.

2.1 Information You Provide to Us. We collect the personal information that you provide to us when you email us, arrange a call with us, request a Concept Package, enter into an Order Form, participate in our design partner program, or otherwise communicate with us. This information may include your name, company, job title, email address, telephone number, billing contact information, and the contents of your communications and of any RFQs or other materials that you send to us.

2.2 Information from Sign-In Providers. When an Authorized User signs in to the Platform, we receive from that provider the Authorized User’s name, work email address, a unique account identifier, and an identifier of the Authorized User’s organization or domain, which we use to link the Authorized User to the applicable Tenant. We do not receive the Authorized User’s password. When an Authorized User signs in with a Tenant Key, we do not receive information from a sign-in provider.

2.3 Information Created Through Use of the Platform. We collect records of the actions taken within each Tenant, including sign-ins, saves, revisions, exports, Share Links, requests to the Platform, and similar information that relates to the Authorized User who took each action.

2.4 Device and Log Information. When you visit the Site or use the Platform, we and our hosting provider automatically collect information about your device and your use of the Services, including your IP address, browser type and version, operating system, the date and time of each request, the pages and features accessed, and error information.

2.5 Cookies and Browser Storage. The Platform stores the following in your browser: (a) a sign-in session, which lasts up to 14 days and ends earlier when you sign out or when your administrator or we end it; and (b) a recovery copy of the unsaved changes to the concept on which you are working, which remains on your device until you save the concept or open another concept. These items are necessary for the Platform to function. In addition, the Site uses cookies, pixels, and similar technologies, provided by us and by third parties, for the following purposes: (c) analytics, to measure traffic to and use of the Services and to understand how visitors interact with them; (d) marketing, to measure the effectiveness of our marketing campaigns and to deliver advertisements for the Services on the Site and on third-party websites and services; and (e) social media, to enable features that connect to social media services, such as LinkedIn, and to permit those services to collect information about your visit to the Site. The third parties that provide these technologies may collect information about your device and your activity on the Site, including your IP address, browser and device identifiers, and the pages you visit, and may combine that information with information collected from other websites and services. Their use of that information is governed by their own privacy policies. You may manage or disable cookies through your browser settings. Disabling the items described in clauses (a) and (b) will prevent the Platform from functioning.

2.6 RFQ and Requirements Files. When you import an RFQ or requirements file into the Platform, the file is read in your browser, and only the requirements extracted from the file are saved to your Tenant.

3. How We Use Information.

3.1 Purposes. We use personal information to:

(a) provide, operate, improve, and maintain the Services;

(b) authenticate Authorized Users and link each Authorized User to the applicable Tenant;

(d) administer Order Forms, invoices, and customer accounts;

(e) provide support;

(f) protect the security and integrity of the Services, detect and prevent fraud and abuse, and allocate processing capacity among our customers;

(g) analyze and improve the Services;

(h) send business communications about the Services, including updates and marketing communications, to our business contacts; and

(i) comply with applicable law, respond to legal process, and enforce our rights or the Terms.

4. How We Disclose Information.

4.1 Service Providers. We disclose personal information to service providers that perform services for us, including: (a) our hosting provider, which hosts the Platform in the United States; (b) third-party authentication providers, which authenticate Authorized Users who sign in through work accounts; (c) providers of email, communications, and scheduling services; (d) providers of payment processing and accounting services; and (e) our professional advisers, including lawyers and accountants.

4.2 Within Your Organization. Content and other information saved within a Tenant, including deal records, is available to all Authorized Users signed in to that Tenant. Information that an Authorized User exports from the Platform or makes available through a Share Link is available to the recipients of the export or the Share Link.

4.3 Legal Requirements. We disclose personal information when we determine that disclosure is required by applicable law, regulation, or legal process, or is necessary to protect the rights, property, or safety of Ordoframe, our customers, or others.

4.4 Business Transfers. We may disclose personal information in connection with a merger, acquisition, financing, reorganization, sale of all or a portion of our assets, or similar transaction, including during due diligence.

4.5 With Consent. We disclose personal information to other parties when you direct us to do so or consent to the disclosure.

4.6 Sale and Targeted Advertising. We do not sell personal information in exchange for money. The marketing and social media technologies described in Section 2.5 permit third parties to collect information about your activity on the Site, which may constitute a “sale” of personal information, “sharing” of personal information for cross-context behavioral advertising, or processing for “targeted advertising” under applicable privacy laws. You may opt out as described in Section 8.

5. Data Retention. We retain personal information for as long as necessary for the purposes described in this Privacy Policy. Information may remain in backups made in the ordinary course until those backups are overwritten.

6. Data Security. We maintain administrative, technical, and physical measures designed to protect personal information. The Platform maintains logical separation of the information of each Tenant from the information of other Tenants. Our hosting provider states that its infrastructure is SOC 2 Type 2 audited and ISO 27001 certified; those certifications apply to the hosting provider’s infrastructure.

7. Data Location. We store and process personal information in the United States. If you access the Services from outside the United States, your personal information will be transferred to, stored in, and processed in the United States.

8. Your Choices and Rights.

8.1 Marketing Communications. You may opt out of marketing communications from us by following the unsubscribe instructions in the communication or by contacting us as described in Section 11. We will continue to send you communications related to the Services and our business relationship.

8.2 Privacy Rights. Depending on where you reside, applicable law may give you some or all of the following rights with respect to your personal information:

(a) to confirm whether we process your personal information and to access it;

(b) to correct inaccuracies in your personal information;

(d) to obtain a copy of your personal information in a portable format; and

(e) to opt out of the sale of your personal information, targeted advertising, or profiling.

To exercise a right, contact us as described in Section 11. We will verify your request using information associated with you, and we may decline a request where applicable law permits. You may designate an authorized agent to submit a request on your behalf, and we may require proof of the agent’s authority. If we decline your request, you may appeal our decision by contacting us with the subject line “Privacy Appeal,” and we will respond within the period required by applicable law. We will not discriminate against you for exercising your rights.

8.3 Requests Concerning Customer Content. If you submit a request concerning personal information that we process on behalf of a customer under Section 1.2, we will refer you to the customer, and we will assist the customer in responding to the request as required by our agreement with that customer.

9. Children. The Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under the age of 16.

10. Changes to This Privacy Policy. We may update this Privacy Policy from time to time. We will post the updated Privacy Policy on the Site and revise the “Last Updated” date above. If we make a material change, we will provide notice through the Services or by email to our customers.

11. Contact Us. Questions about this Privacy Policy and requests to exercise your rights may be directed to Ordoframe Inc., 23852 SW Dewberry PL, Sherwood, OR 97140; by email to info@ordoframe.com.