Security & data protection

1. Encryption at rest

All your stored data is encrypted on disk, at all times:

• Database (orders, customers, conversations): encrypted at rest with AES-256 by our database host.
• Files and media (product photos, receipts, attachments, documents): stored on object storage encrypted at rest with AES-256.
• Backups: encrypted too.

In other words: even someone who physically obtained a disk could not read anything from it.

2. Encryption in transit

Every exchange between your browser, our servers and connected services uses TLS 1.2+ (HTTPS). No data travels in clear text over the network.

3. Secrets & passwords

• Access tokens for your connected accounts (Instagram, WhatsApp, store, carriers) are re-encrypted with AES-256 at the application level before being saved — one layer on top of disk encryption.
• Passwords are hashed (bcrypt), never stored in clear text, and unreadable even by us.
• Token-based sessions with automatic logout after inactivity.

4. Merchant isolation

Ordylo is multi-tenant: each merchant is isolated by an identifier verified on every request. One merchant can never access another's data — guaranteed by design, not by trust.

5. Your data is yours

• You remain the owner of your catalog, media and customer data.
• You can request export or deletion of your data at any time (see the deletion procedure).
• We do not train any AI model on your data, and our AI providers are contractually bound to the same.
• No targeted advertising, no retargeting from your data.

6. No third-party sharing — one exception

We never sell or share your data with third parties for commercial purposes.

The only exception is the shared anti-fraud network (cash on delivery), which you approve by accepting our Terms of Service:

• Only hashed phone numbers (an irreversible cryptographic fingerprint) are shared — never a name, address or any customer data in clear text.
• No merchant can view, browse or download this list, nor recover a number they don't already hold.
• You are only warned if a number you already hold has been flagged by several merchants: you remain the sole decision-maker.
• Anyone can dispute a flag; it is reviewed and removed if unjustified.

7. Hosting & sub-processors

We rely on established technical sub-processors, bound by data protection agreements (DPAs): database hosting, application servers and object storage (European Union), network/CDN, Meta APIs (Instagram/WhatsApp, if you connect them), transactional email delivery and an AI provider. The detailed list is in our privacy policy.

8. Report a vulnerability

Think you found a vulnerability? Email us at support@ordylo.com. We take every report seriously and respond quickly.