Privacy Policy

Last updated: May 10, 2026

This page describes our intended approach to privacy. Final binding terms land before public launch and before any client data enters the platform. For the current state, contact privacy@ordani.com. Ordani is designed for HIPAA-context practice; we treat client data as protected health information (PHI) from day one.

What we collect

From you, the provider: your account email, name, and professional role. From your practice: any client data you choose to enter (intakes, notes, appointments, documents, birth records). We don't ask for more than what your workflow needs.

How we use it

To deliver the service you signed up for: storing your records, generating invoices, sending appointment reminders, supporting your practice over email when you ask for help. We don't sell data and we don't train models on your client information.

Who has access

Only the provider account and team members the provider invites can read their data. Data is encrypted at rest. Access is gated by HIPAA-aligned role-based controls; sensitive operations require step-up authentication. Our internal staff cannot read your client data without an explicit support request from you on the record.

Third-party processors

We use Stripe to process payments — they see billing information (your card, your invoices), never your client records. Beyond Stripe, we use a small set of trusted infrastructure vendors covered by our Business Associate Agreements (BAAs). We'll publish the full subprocessor list at public launch.

Data retention

We retain your data while your account is active. On account deletion, your data is removed from production systems within 30 days and from backups within 90 days, except where HIPAA requires us to retain audit logs (six years) or where you ask us to keep records for longer.

Your rights

You can access, correct, export, or delete your data at any time from account settings or by emailing us. If your jurisdiction grants additional rights (GDPR, CCPA, state privacy laws), those apply and we honor them.

Cookies and analytics

We use no third-party advertising cookies. Our analytics is privacy-first and captures aggregate page views only — no personally identifying information, no cross-site tracking, no fingerprinting.

Contact

Questions, requests, or concerns: privacy@ordani.com. We respond within two business days.