Your information

Privacy Policy

Your podcast media belongs in your storage. This policy explains the information Ordimize handles to support the website and your production workspace.

Last updated:

Who this policy covers

Ordimize is an independent software product developed and operated by Surendra Mohnot, based in India. Ordimize provides a website and software for coordinating podcast production. This policy covers our website, communications and product features when they are available to your workspace. Ordimize is in development; beta access and enabled features may vary.

For privacy questions, contact privacy@ordimize.com or use our Contact form with the subject "Privacy request". If you use a team workspace, its Owner and Administrators also control membership and access to the information added there.

Information we handle

Account and access
Your name, email address, identity-provider identifier, workspace memberships, roles, invitations and account or access status. Our authentication provider handles sign-in credentials; Ordimize does not store your sign-in or storage-provider passwords.
Workspace records
Organization and Client details, Podcasts, Episodes, workflow settings, assignments, instructions, checklists, source references, file metadata, quality-review feedback and activity history that you or your teammates add.
Messages and requests
The name, email, subject and message you send through Contact, and information supplied when requesting beta access or support. A contact or beta request does not subscribe you to our newsletter.
Newsletter
Your email address, confirmation status and consent record if you subscribe. A confirmation email is sent first; you join the updates list only after confirming. Email delivery information is also processed by our email provider.
Technical information
Network and request information, including IP addresses processed by hosting providers, browser information, session identifiers and security or error information needed to serve requests and prevent abuse. Newsletter abuse controls use hashed IP and email identifiers.

Account and workspace information may come from you, authentication providers or workspace administrators. We handle account, communication and security information and other information needed to run the service directly. Customer organizations generally decide what information to add to their workspaces and who is authorized to access it; Ordimize handles that information to provide the requested services. Privacy responsibilities depend on the activity and applicable law.

Please include only information you are authorized to share. Production notes, titles and feedback can contain personal information about other people; your workspace is responsible for having permission to include it.

Customer storage connections

Ordimize connects to customer-controlled storage to support the production features enabled for your workspace. Connection records can include the storage account identifier, folder and file identifiers, names, metadata and access capabilities. We use these records to verify access and retain production evidence; connection credentials are stored encrypted.

Podcast media remains in customer-controlled storage. Enabled preparation features can create Episode folders and read folder or file metadata. The current web interface handles configuration, source references and production records; Ordimize's API does not download, upload, edit, transfer or delete your media. Media preparation and direct transfers are part of the planned desktop workflow and are not available merely because a storage connection exists.

Google Drive is the first storage integration. Its permissions, data use and connection controls are described below. Additional integrations will be described when they become available.

Google Drive access and data

When Google Drive connection is enabled, an authorized workspace Owner or Administrator can connect a Google account and select a production folder using Google Picker. Ordimize requests the https://www.googleapis.com/auth/drive.file permission for files and folders created with, or explicitly shared with, the app. It does not request access to your entire Drive, Gmail or contacts.

We use the connected account's stable identifier, selected folder identifiers and names, file metadata and access capabilities to keep the connection tied to the correct account and verify that the workspace can use its production folder. File references, checksums and production evidence support the Episode workflow. Access is limited by both Google's grant and your current workspace permissions.

We store the account identifier and relevant folder/file records in our product database. The refresh credential that keeps an authorized connection working is encrypted before database storage. A short-lived access token is provided to Google Picker when an authorized user selects a folder. Client secrets and refresh credentials are not exposed in the member interface.

Google data is used to provide the storage and production features you request. We do not sell it, use it for advertising, or use it to train general-purpose AI models. We do not routinely inspect your media. Any operator access to Google data is limited to your specific permission for support, necessary security investigation, or legal obligations.

Ordimize's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

You control the connection. Disconnecting Drive in Ordimize removes that workspace's saved refresh credential and invalidates its folder checks. It does not delete your Google files, erase workspace history, or revoke every Google grant that may serve another workspace. To revoke the app's Google access, use Google Account connections. See Data Requests for removal of stored Ordimize records.

Why we use information

Where applicable, our legal grounds include providing requested services under an agreement, meeting legal obligations, and legitimate interests in security and reliable operation where the law permits. Optional newsletter subscriptions rely on consent, which you can withdraw.

We do not sell personal information or use workspace content for targeted advertising.

Who receives information

Teammates can see workspace information according to their roles, assignments and granted capabilities. Workspace Owners and Administrators manage that access.

Service providers process information needed to run Ordimize: Cloudflare for website delivery and newsletter coordination; our API hosting provider for backend operation; Neon for product database storage; WorkOS for authentication; Resend for subscribed updates and confirmation emails; and Google Workspace for contact and invitation email. Google processes Drive consent and Picker interactions. Some website pages also request fonts or interface resources from external content providers, which receive the network information required to serve those resources.

We share information, including stored storage-account and folder/file records, with providers only as needed for these service functions, and may disclose information where legally required or necessary to investigate security incidents. Providers may process data in countries other than yours and apply their own service privacy terms. Customer media stays in the storage account you control.

Where applicable law requires protections for an international transfer, those requirements apply to our use of service providers. You can ask us about the arrangements relevant to your information.

Storage, security and retention

We use HTTPS, authenticated access, workspace permission checks and encrypted stored storage connection credentials. Access to operator credentials and recovery copies is restricted. No system can guarantee absolute security.

Account and workspace records and revision history are retained while needed to operate the service and preserve shared production history. Archiving a Client or Podcast, removing a teammate, or disconnecting storage is not the same as deleting all related records. Contact and support messages may remain in our email system for correspondence and support.

Unconfirmed newsletter links expire after 24 hours and pending records are cleaned up. Confirmed subscriptions remain until you unsubscribe or request removal. Consent or suppression records may remain to document your choice and avoid sending further updates. Security and audit records may be retained while needed to investigate abuse or meet legal obligations. Removal from active systems may not immediately remove protected backup copies; we explain any applicable limits when responding to a request.

Your choices and requests

You can unsubscribe using an update email, manage browser storage, disconnect storage or revoke access through the storage provider, and ask us about access, correction, export or deletion of your information. Available legal rights depend on where you live. We review requests, verify the requester and consider other people's information and applicable obligations.

Where applicable, your rights may also include data portability, restriction of or objection to processing, withdrawal of consent, and a complaint to the relevant data protection authority. Withdrawing consent does not affect prior lawful processing.

Use Data Requests for the steps and important distinctions between an account, a shared workspace and files in customer storage. Browser storage is explained in our Cookies page.

Children and policy changes

Product accounts and workspaces are intended for adult users managing podcast work, not for children. Please contact us if a child has supplied personal information so we can review its removal.

We update this page when our practices change and show the revised date. For material changes, we provide an appropriate notice. Changes to how we use connected storage data will be disclosed before that use begins, with renewed consent where required. This includes changes to Google data use under the Google API Services User Data Policy.