Privacy Policy

1. Summary

This is a plain-language overview; the sections below give the detail. Speech recognition and text enhancement in the Ordo app run on your Mac, and the app does not upload your recordings.

Through this website we store only the email address, site language, and short source label you submit when joining the waitlist. We set no advertising or cross-site tracking cookies, analytics are disabled by default, and we do not sell, rent, or trade personal data.

2. The Ordo app processes your voice on your Mac

Speech recognition and text enhancement run on-device on your Mac. Audio captured while you dictate is processed locally to produce text, and the app does not upload your recordings to us or to any third party.

History, dictionary, and learned-preference data the app keeps to improve results for you are stored locally on your own device.

You can choose and switch which models the app uses. This Privacy Policy describes the app's data practices at a general level and does not document its internal technical design.

3. Information we collect through this website

When you join the Ordo waitlist, we collect the email address you submit (required), the site locale you used (English, Chinese, or Japanese), and a short source label indicating where the sign-up came from (for example, “homepage-cta”). We also store an internal status (such as pending, approved, or downloaded) and an approval date that we set.

We do not create accounts or passwords on this website, do not process payments here, and do not build advertising or behavioral profiles. We do not collect precise geolocation or special categories of data (such as health, biometric, or similar sensitive information).

4. Information collected automatically

When you submit the waitlist form, your IP address is read only transiently in server memory to apply per-process, fixed-window rate limiting that protects the waitlist endpoint from abuse. This IP address is not written to our database, is not otherwise persisted, and is reset when the service is redeployed.

The form includes a hidden anti-bot (“honeypot”) field; if it is filled, that submission is discarded.

As is normal for any website, our hosting and CDN providers may generate short-lived technical request logs for operating and securing the service.

5. Cookies

The public marketing site does not set advertising or cross-site tracking cookies. Only strictly necessary cookies may be used for core functionality.

Analytics are disabled by default: the shipped build contains no analytics, no analytics cookies, and makes no analytics network calls. A session cookie exists only within the staff-only admin area and is not set for normal visitors.

If we add privacy-respecting, aggregate analytics in the future, we will update this policy before doing so.

6. How we use information

We use the information described above to operate and manage the beta waitlist, to send invitations and closely related beta updates, to prevent abuse and keep the service secure, and to comply with applicable law.

7. Legal bases for processing

Where the EU or UK GDPR applies, we rely on your consent for waitlist communications, and on our legitimate interests in operating the website and in security and abuse prevention.

Where we rely on consent, you can withdraw it at any time; this does not affect processing carried out before withdrawal.

8. How we share information

We do not sell, rent, or trade personal data, and we do not use third-party advertising.

We share information only with service providers that process it on our behalf and under their own terms, and only as needed to run the service: website hosting and serving (Vercel), DNS and CDN (Cloudflare), the database and content system that stores waitlist entries, and an email service used to reply and send invitations.

We may also disclose information if required by law or legal process, or where necessary to protect our rights, safety, or the security of the service.

9. International data transfers

The operator is located in Hong Kong, and our service providers may process data in other countries, including in the United States, Japan, Singapore, and the European Union. By joining the waitlist, you understand that your information may be processed outside your own country.

10. Data retention

We keep waitlist information for as long as the waitlist and beta program are active, or until you ask us to remove it. After that, we delete or anonymize it within a reasonable period.

The transient request data described in Section 4 is short-lived and is not retained in our database.

11. Security

We use reasonable technical and organizational measures to protect the information we hold, and access to waitlist data is limited to the small team operating Ordo. The admin area is authentication-only and is not readable by the public.

No website or internet service can be guaranteed to be completely secure.

12. Your rights and choices

Depending on where you live, you may have the right to access, correct, or delete your information, to object to or restrict certain processing, to withdraw consent, and to unsubscribe from our communications.

To exercise these rights, email us at the address below. We verify requests using the email address on file and respond within a reasonable time. You may also have the right to lodge a complaint with the relevant data protection authority in your place of residence.

13. Children

Ordo and this website are not directed to children and are not intended for users under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will remove it.

14. Third-party links and names

Third-party product names shown to indicate compatibility, and any external links, belong to their respective owners and are subject to those parties' own privacy policies, which we do not control.

15. Changes to this policy

We may update this policy as the product and our practices evolve. When we do, we will revise the “last updated” date above, and material changes will be reflected here. Continued use after changes take effect means you accept the updated policy.

16. Contact

The controller of personal data described in this policy is DISTANT STARS LIMITED. You can reach us about privacy at the email address below.