Privacy Policy

Who we are

Orzeko operates DealerOS and related account and platform services. This policy covers orzeko.com, the Orzeko account hub, and Orzeko applications made available to users through their organizations. Orzeko is currently in invite-only beta.

Information we collect

We collect the following categories of information:

• Information you provide: when you contact us or request access, we collect your name, email address, company, and any message you send.
• Inquiry attribution: we keep the landing-page path, referring website origin, and campaign tags in your browser tab's session storage. If you submit an inquiry, those details accompany it to help us understand which campaigns lead to conversations. We do not collect arbitrary URL parameters through this feature.
• Time-savings calculator: calculations run in your browser. If you choose to discuss an estimate, we temporarily save its workflow inputs and any optional labor-cost and software-budget assumptions in this tab to prefill an editable contact message. This handoff expires after 30 minutes. The estimate is sent to us only if you submit that message.
• Account information: when you use an Orzeko app, we process the identity details associated with your Orzeko ID, such as your email and organization membership.
• Authentication data: sign-in is handled through Orzeko ID, which uses Amazon Cognito and supports Google sign-in. We receive the account identifiers needed to authenticate you.
• Usage data: we use privacy-friendly, aggregate analytics (Vercel Web Analytics and Speed Insights) to understand site performance and traffic. This does not build advertising profiles.

How we use information

• Provide, operate, and secure DealerOS and related Orzeko services.
• Respond to inquiries, demos, and access requests.
• Organize inquiries and follow-ups in our private CRM and understand campaign performance.
• Manage organizations, roles, and access for invite-only beta participants.
• Maintain audit trails, prevent abuse, and meet legal obligations.
• Improve performance, reliability, and product direction.

How information is shared

We do not sell personal information. We share information with service providers that help us run Orzeko, under agreements that limit their use of it. These providers include:

• Amazon Web Services / Amazon Cognito — identity, authentication, and hosting infrastructure.
• Google — Google sign-in, when you choose it.
• Vercel — application hosting and aggregate analytics.
• Resend — delivery of contact form notifications to our team.

Data retention

We retain personal information for as long as needed to provide the service, support beta participants, and meet legal, security, and operational requirements. Waitlist and contact submissions are kept until they are no longer needed for follow-up.

Security

We use tenant isolation, server-side permission checks, audit logging, and encryption in transit. No method of transmission or storage is perfectly secure, but we work to protect your information. See our Security overview for details.

Your choices and rights

Depending on your location, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To make a request, contact us using the details below and we will respond as required by applicable law.

Children's privacy

Orzeko is a business tool and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by updating the effective date above.