Privacy Policy

Who we are

This site, ordinant.ai, is run by OrdinantAI. In this policy, “we” and “us” mean OrdinantAI. We decide why and how your data is handled, which makes us the data controller under the GDPR and the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

Contact for anything in this policy: privacy@ordinant.ai

What we collect

When you join the waitlist

When you submit your email in the waitlist form, we store three things:

• Your email address, trimmed and converted to lowercase.
• The time you signed up.
• Where on the site you signed up.

We store nothing else about you at signup. We do not store your IP address or your browser’s user agent with your signup. If that ever changes, we will update this policy first.

Bot protection

The waitlist form uses Cloudflare Turnstile to keep bots out. When you scroll to or click into the form, Turnstile checks your browser and processes your IP address and browser details. Your email address is not sent to Cloudflare. Its notice is at cloudflare.com/turnstile-privacy-policy.

Why we collect it, and our legal basis

The waitlist email. We collect it so we can contact you about early access to Operator. We do this only with your consent, which you give by submitting the form. This is consent under the DPDP Act and Article 6(1)(a) of the GDPR. You can withdraw it at any time by asking us to delete your data (see “Your rights”). Withdrawing does not affect what we did before you withdrew.

Every email we send to the waitlist will say who we are and how to stop receiving them.

Bot protection. For visitors in the EEA and UK, the basis is our legitimate interest in keeping the waitlist secure, under Article 6(1)(f) of the GDPR.

Who handles your data

We do not sell your data or use it for advertising. Two services process it for us:

• Amazon Web Services (AWS) hosts the site and stores waitlist signups in Mumbai, India.
• Cloudflare, Inc. runs Turnstile on its global network, so if you are in the EEA or UK, that data leaves it.

We share data with no one else, except where the law requires it.

How long we keep it

• Waitlist entries: until 12 months after Operator launches, or until you ask us to delete yours, whichever is sooner.
• Backups: deleted entries leave our backups within 35 days.
• Access records: we log each time the list is read, and those logs include email addresses.

Who can see it

Only a few named people at OrdinantAI can read your email address, and each read and deletion is logged. Stored data is encrypted.

Your rights

You can ask us to:

• tell you whether we hold your data, and give you a copy;
• correct it;
• delete it;
• withdraw your consent.

Under the DPDP Act these rights belong to you as a data principal. Under the GDPR and UK GDPR they apply if you are in the EEA or UK, and you may also object to processing and ask for it to be restricted.

To make a request, email privacy@ordinant.ai from the address the request is about. We ask you to write from that mailbox so we can confirm the request is yours. We will confirm completion within 30 days.

Complaints. Write to privacy@ordinant.ai. If we have not resolved your complaint, you may complain to the Data Protection Board of India. If you are in the EEA or UK, you may also complain to your local data protection authority.

Children

The waitlist is for developers and is not meant for anyone under 18. We do not knowingly collect data from children. If you think a child has joined the waitlist, tell us at privacy@ordinant.ai and we will delete the entry.

Changes to this policy

When we change this policy, we will update the “Last updated” date above. If a change affects how we use your email address, we will tell the people on the waitlist by email before it takes effect.

Contact

OrdinantAI
privacy@ordinant.ai