Privacy Policy
Last updated: June 19, 2026
1. Scope
This Privacy Policy explains how Ortonomate (“we”, “us”, “our”) collects, uses, stores, and protects personal information in connection with our cloud-based CRM and lead management platform (“the Service”) at ortonomate.app.
Ortonomate serves customers globally. We are committed to protecting your privacy in compliance with applicable privacy laws in your jurisdiction, including the General Data Protection Regulation (GDPR) for users in the European Economic Area and United Kingdom, the California Consumer Privacy Act (CCPA) for California residents, the Australian Privacy Act 1988 for Australian users, and equivalent legislation in other countries. Our base jurisdiction is Australia, and our practices meet or exceed those standards internationally.
2. Information We Collect
We collect information in two ways:
a) Information you provide directly
- Account information: your name, business name, email address, and password when you sign up.
- Billing information: payment details processed securely by our payment provider (Stripe). We do not store your full card number.
- Support communications: messages you send us via chat, email, or any support channel.
- CRM data: contacts, pipeline entries, form submissions, notes, call logs, and other information you upload or create within the platform.
b) Information collected automatically
- Usage data: pages visited, features used, timestamps, and actions taken within the platform.
- Device and browser data: IP address, browser type, operating system, and referring URLs.
- Cookies: session cookies used for authentication and analytics cookies to help us understand how the platform is used. You may control cookies through your browser settings.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service and your account.
- Process subscription payments and send billing communications.
- Send service notifications, product updates, and support responses.
- Improve the platform based on usage patterns and feedback.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. Your CRM Data (Your Contacts’ Data)
When you use Ortonomate to manage your leads and contacts, you act as the data controller for the personal information of those contacts. We act as a data processor on your behalf, storing and processing that data solely to deliver the Service.
You are responsible for ensuring you have the appropriate lawful basis to collect, store, and contact the individuals in your CRM — including obtaining consent for SMS and email marketing where required by law (e.g. Australian Spam Act 2003, TCPA, GDPR).
We do not use your contacts’ data for our own marketing purposes and do not share it with third parties except as required to provide the Service (e.g. delivering SMS via Twilio or email via Resend).
5. Third-Party Service Providers
We share limited personal information with trusted third-party providers who help us deliver the Service:
- Stripe — payment processing. Subject to Stripe’s Privacy Policy.
- Twilio — SMS and voice communications. Subject to Twilio’s Privacy Policy.
- Resend — transactional email delivery. Subject to Resend’s Privacy Policy.
- Firebase (Google) — authentication and database. Subject to Google’s Privacy Policy.
- Crisp — live chat support. Subject to Crisp’s Privacy Policy.
- Vercel — hosting infrastructure. Subject to Vercel’s Privacy Policy.
Each provider is contractually required to handle data securely and only for the purpose of providing their service.
6. Data Storage & Security
Your data is stored on cloud infrastructure hosted in secure data centres. We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including encrypted connections (HTTPS), access controls, and authentication requirements.
No method of transmission or storage is 100% secure. If you become aware of a security concern, please contact us immediately at support@ortonomate.app.
7. Data Retention
We retain your account and CRM data for as long as your subscription is active. Upon cancellation, your data is retained for 30 days to allow for export requests, after which it is permanently deleted.
Billing records and transactional data may be retained for longer periods where required for legal, accounting, or compliance purposes.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: request a copy of the personal information we hold about you.
- Correction: request that inaccurate or incomplete information be corrected.
- Deletion: request that we delete your personal information, subject to legal retention obligations.
- Portability: request your data in a portable format (where technically feasible).
- Objection: object to certain types of processing, including direct marketing.
To exercise any of these rights, contact us at support@ortonomate.app. We will respond within 30 days.
9. Cookies
We use cookies and similar technologies to operate the Service (session management, authentication) and to understand usage patterns (analytics). You can disable non-essential cookies through your browser settings, though this may affect the functionality of the platform.
10. Children’s Privacy
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice before the changes take effect. The updated policy will always be available at ortonomate.app/privacy.
12. Contact
For questions, concerns, or to exercise your privacy rights, contact us at support@ortonomate.app or .