OrderDream, Inc. ("OrderDream," "we," "us") provides software that turns quote requests sent by email into priced estimates and jobs for subcontractors. This policy explains what information we collect, how we use it, and the choices you have. It applies to orderdream.com, the OrderDream application at app.orderdream.com, and our APIs.
1. Information we collect
Account information. When you sign in with Google we receive your name, email address, profile picture and Google's account identifier for you. We do not have passwords to store. We also keep the organizations you belong to and your role in each.
Business data you bring into OrderDream. Customers, quote requests, line items, site details, your catalog and prices, subcontractors, estimates, invoices and uploaded files. This data belongs to your business. We process it only to run the service for you.
Email you forward to us. When you set up forwarding, messages sent to your forwarding address are delivered to us. That includes the sender, recipients, subject, body and attachments. We use them to create and update quote requests. See "Email content and AI processing" below.
Payment information. Subscription billing is handled by Stripe. We never see or store card numbers.
Usage and device data. The IP address and browser of each signed-in session, and server logs with timestamps. We use them for security, rate limiting and debugging. Our logs record which page or endpoint was used, never the full URL. We do not run third-party advertising trackers.
2. Google sign-in
Google is used for sign-in only. We request the
openid, email and
profile scopes and nothing more. OrderDream does
not request access to Gmail, Google Calendar or any other
Google data, and it does not read your mailbox. OrderDream's use
of information received from Google APIs will adhere to the
Google
API Services User Data Policy, including the Limited Use
requirements.
3. Email content and AI processing
The content of email forwarded to OrderDream is sent to our AI model provider, so that it can extract the quote details: line items, site address and access, contact, and preferred dates. It is also used to draft follow-up questions to your customer. Text you add to your knowledge base is sent to an embedding provider so that it can be searched.
- We do not sell email content.
- We do not use email content for advertising.
- We do not use email content to train AI or machine-learning models, and our providers do not use it to train theirs.
- Humans at OrderDream do not read your email except with your permission (for example, a support request), where required for security or legal compliance, or where the data has been aggregated and anonymized.
Email is accepted only from forwarding addresses you have verified. You can turn forwarding off in your mail host, or remove the address in Settings, at any time.
4. How we use information
- To provide, maintain and improve the service.
- To turn forwarded email into quote requests, follow-ups, estimates and jobs for subcontractors, on your instructions.
- To send email on your behalf to your customers and subcontractors. Replies go back to your own forwarding address.
- To send transactional messages: invitations, forwarding-address confirmations and billing notices.
- To bill subscriptions through Stripe.
- To secure the service: authentication, abuse prevention, rate limiting and audit logging.
- To comply with legal obligations.
5. How we share information
We do not sell personal information. We share data only with service providers who process it on our behalf under contract:
- Amazon Web Services: hosting, database and file storage.
- Mailgun: receiving forwarded email and sending email.
- Anthropic: AI extraction of quote details and drafting of follow-ups from email content.
- OpenAI: embeddings for knowledge-base search.
- Stripe: subscription billing.
- Google: sign-in.
We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger or acquisition (with notice to you).
6. Data retention and deletion
- We keep your organization's data while it is active.
- Admins can download all of their organization's data, and anyone can download their own, as JSON at any time.
- When an organization or account is deleted, or an item is archived or removed, its data is permanently deleted from production systems within 30 days. It is deleted from backups as they rotate.
- The bodies of forwarded email are cleared after 12 months.
- Audit events are kept for up to 24 months.
- A session that has not been used for 3 days is signed out.
7. Security
All traffic is encrypted in transit (TLS), and the database is encrypted at rest. Sign-in is through Google, so there are no OrderDream passwords to steal, and every session can be revoked right away. Each organization's data is isolated from every other's. We also use role-based permissions, an audit trail, and signature checks (DKIM and ARC) on the mail we receive. No method of transmission or storage is 100% secure, but we work to protect your data with industry-standard safeguards.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain processing. You can export your data and delete your account directly in the app. For anything else, contact us and we will respond within 30 days.
9. Cookies
The application uses a session cookie for sign-in and a CSRF token for request security. The marketing site sets no cookies. We do not use third-party advertising or analytics cookies.
10. Children
OrderDream is a business tool and is not directed to children under 16. We do not knowingly collect personal information from children.
11. Changes to this policy
If we make material changes we will notify organization owners by email and post the updated policy here with a new effective date.
12. Contact
Questions or requests: contact@orderdream.com.