Privacy Policy

Who controls the data

For an institute's own account and applicant records, the institute is the data controller and Ordiso is a data processor acting on its instructions. For our marketing site and account sign-up, Ordiso is the controller.

Information we collect

• Institute account details — institute name, your name, work email, and mobile number provided at registration, plus optional profile settings (address, contact info, logo).
• Applicant data— information submitted through an institute's application form (e.g. names, contact details, and any custom fields the institute configures), which the institute controls.
• Usage and technical data — basic logs needed to run and secure the service.
• Messages you send us — via the contact form or in-app feedback.

How we use it

• To provide, maintain, and secure the service.
• To authenticate you and keep you signed in.
• To respond to your enquiries and support requests.
• To enforce plan limits and prevent abuse.

We do not sell your data, and we do not use applicant data for advertising.

Cookies

We use only strictly necessary cookies — for authentication (keeping you logged in) and remembering your session preference. We do not use advertising or third-party analytics cookies, so no cookie-consent banner is required.

Service providers

We host data and authentication with Supabase and serve the application through Cloudflare. These providers process data on our behalf under their own security and privacy commitments.

Data retention

Institute and applicant data is retained while the account is active. Institutes can delete their own records at any time; when an account is closed, associated data is removed in the normal course of operation.

Your rights

Depending on your location, you may have rights to access, correct, export, or delete personal data. Institutes can manage applicant records directly in the dashboard. For other requests, contact us and we'll help.

Children's data

Institutes may collect applicant information that relates to minors as part of admissions. That data is controlled by the institute, which is responsible for obtaining any consents required by law.

Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Contact

Questions about this policy? Reach us through the contact page.