Your data, on your terms.
Plain-English summary of how Ordel handles your information. Last updated 2026-10-13.
Who this policy covers
Ordel is operated from Bristol, United Kingdom. This policy explains how we handle personal data when you visit ordel.io, create an account, or use the hosted service.
We wear two hats. For your account, billing, support and usage information, and for visits to our website, we are the controller and this policy is the full story. For the content you process through Ordel, such as recordings, screenshots, videos and test data from the applications you test, you are the controller and we are your processor: we handle it only on your instructions, under our terms and, where you have one, your data processing agreement with us.
Recordings capture whatever the browser shows, so they can incidentally include personal data about your own users, for example a name or email typed into a form. That data is yours to govern. If you are a user of an application someone tests with Ordel and you have a question about your data, please contact that company; we will pass on any request that reaches us.
What we collect
Account details you provide: name, work email, a password where you use one (stored as a hash, never in the clear) and workspace information. If you sign in with a magic link or through Google, GitHub, or another identity provider, we receive your verified email and basic profile from them.
Billing details: your plan, seats, invoices, credit purchases and payment history. Card numbers are collected and stored by Stripe, our payment processor; they never touch our servers.
Workspace content: requirements, test cases, scripts, recordings, runs, defects, screenshots, videos, traces, reports and the knowledge you give the AI about your application. Credentials you save for a target application are stored encrypted and decrypted only while a test runs.
Usage and technical data: which features you use, AI usage measured in credits, server logs, IP address, browser type, and error reports. Error reports are scrubbed of credentials and oversized content before they leave the request, and we do not record sessions.
Support and other messages you send us.
How we use it, and on what basis
To provide the service you signed up for: running your tests, routing work to the right models and infrastructure, securing your account, billing your plan, and supporting you. The legal basis is our contract with you.
To keep Ordel reliable and improve it: monitoring performance, investigating errors, preventing abuse, and understanding which features are used. The legal basis is our legitimate interest in running a secure, working product, balanced against your rights.
To meet legal obligations, for example keeping tax records, and, where we ask for it, on the basis of your consent, which you can withdraw at any time.
We do not sell your data, we do not use it for advertising, and we do not profile you.
AI features and your data
When you use AI features, the inputs that feature needs, for example a page snapshot, a test description, or a failing run, are sent to the large language model provider configured for your workspace. We send what the feature needs rather than your whole workspace, and detected secrets and sensitive values are redacted before the call.
We do not use your content to train models, and we use our model providers under business terms that do not permit them to train on it either. Where your workspace brings its own provider key, that provider processes those calls under your agreement with them.
We record traces of AI activity, such as which model ran, what it cost and how it performed, to operate, debug and bill these features. Those traces are held with our AI observability provider, listed below, with the same redaction applied.
The free Ordel CLI runs entirely on your machine and sends nothing to us.
Where your data lives
Ordel is hosted on Amazon Web Services in the United States, in the us-east-1 region, with an encrypted copy of run artifacts replicated to us-west-2 so a regional outage cannot lose them. Your data therefore leaves the United Kingdom and the European Economic Area.
We protect those transfers with the safeguards data protection law provides: the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, and, where a provider is certified under the EU-US Data Privacy Framework and its UK extension, that certification. Customers who need copies of these safeguards can request them from us.
Retention and deletion
We keep your account and workspace data while your account is active. Run artifacts such as screenshots, videos and traces are deleted 30 days after the run by default; workspace administrators can change that window. Audit logs are kept for the period included in your plan. Logs and error reports are kept for no longer than 90 days.
You can delete individual content at any time from the product. When a workspace is closed, it enters a 30-day window during which we can restore it if you ask; after that we delete its data. Copies in backups age out within 30 days of the deletion. Personal-data deletion requests go into a queue and are actioned by a person, not silently dropped.
We keep billing records for as long as tax law requires.
Security
Data is encrypted in transit and at rest, in both the database and artifact storage. Every workspace is isolated at the database layer with row-level security, so one customer's queries cannot reach another's rows. Passwords are hashed with Argon2id, credentials you store for target applications are encrypted and decrypted only at run time, and captured recordings scrub secrets before they are saved.
Access within Ordel is role-based and logged in your audit log. Our own staff access to customer data is limited to what support and operations require. Backups are encrypted and replicated across regions.
No system is perfectly secure. If a security breach affects your data, we will tell your workspace administrators without undue delay, and no later than 72 hours after we confirm it, with what we know and what we are doing about it.
Your rights
Under UK and EU data protection law you can ask to access, correct, export, or delete your personal data, to restrict or object to our processing of it, and to withdraw consent you have given. Much of this you can do yourself from your account settings. For anything else, contact us and a person will action it, normally within 30 days.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or, if you are in the EEA, to your local supervisory authority. We would rather you told us first so we can put it right.
California and other US states
We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. The categories we collect are listed above under "What we collect", for the purposes listed under "How we use it". Residents of California and other states with privacy laws can exercise their rights to know, delete and correct by contacting us, and we will not treat you differently for doing so.
Children
Ordel is a business tool for adults. We do not knowingly collect personal data from anyone under 18, and we will delete it if we learn we have.
Changes to this policy
We update this policy when our practices change. For material changes we will give you at least 30 days' notice in the product or by email before they take effect. The date at the top of this page is the date of the current version.
Contact
Ordel is based in Bristol, United Kingdom. For any question about this policy or your data, including requests for a data processing agreement or a copy of our transfer safeguards, reach us through our contact page and mark your message for the data protection lead.
Questions? Contact us. See also our terms.