Current development build · November 2, 2026
Privacy and data use
Who operates Ordo
Christopher Mills operates the current MillsSupply installation. Questions or data requests can be sent to christermills86039@icloud.com.
Information used
Ordo stores shop and listing details, listing photos, inventory and variation values, orders and receipts, production jobs, model files, printer status, operational logs and connection settings. Etsy receipt responses can include buyer and delivery information. These records support the shop’s order and production workflows.
Where information goes
The primary database and files are stored on the owner’s Windows PC. API credentials are protected using Windows credential encryption. The current Etsy connection passes requests through Make; remote access uses a Cloudflare tunnel. The public information and authorization-return pages are hosted on Cloudflare Pages; hosting request logs may include visitor IP addresses and requested URLs. The return page keeps the authorization response only in the open browser page until it is copied to Ordo; it does not perform the token exchange. Those services process information necessary for their roles and have their own terms and privacy policies.
AI-assisted tasks use the provider configured by the owner. Local Ollama processing and external coding/model services have different data flows. Selected images, listing text and task context may be sent to the chosen provider. External AI processing must not be described as local-only. A complete per-provider data audit remains required before customer release.
Controls and retention
The owner controls the PC, connection settings and local backups. Revoking an Etsy connection prevents subsequent authorized access but does not automatically delete files already stored locally. Self-service customer account deletion, an automatic retention schedule and multi-shop data separation are not implemented yet. Contact the operator for inspection or removal requests; backup copies need separate handling.
Display freshness
Active Listings hides cached listing information after six hours until a fresh Etsy read is available. Production records and retained design files serve separate operational purposes; their retention policy must be finalized before a public release.
Before customer launch
The operator must finalize user consent, retention/deletion procedures, shop isolation, access controls, processor disclosures and incident handling. This notice will be updated to reflect the actual released system.