Privacy Policy

Who we are

Orzeko operates a multi-vertical SaaS platform and its vertical products, including DealerOS and CertGate. This policy covers our marketing site at orzeko.com and the Orzeko account hub and apps. Orzeko is currently in invite-only beta.

Information we collect

We collect the following categories of information:

• Information you provide: when you join a waitlist or contact us, we collect your name, email address, company, and any message you send.
• Account information: when you use an Orzeko app, we process the identity details associated with your Orzeko ID, such as your email and organization membership.
• Authentication data: sign-in is handled through Orzeko ID, which uses Amazon Cognito and supports Google sign-in. We receive the account identifiers needed to authenticate you.
• Usage data: we use privacy-friendly, aggregate analytics (Vercel Web Analytics and Speed Insights) to understand site performance and traffic. This does not build advertising profiles.

How we use information

• Provide, operate, and secure the Orzeko platform and its vertical apps.
• Respond to inquiries, demos, and access requests.
• Manage organizations, roles, and access for invite-only beta participants.
• Maintain audit trails, prevent abuse, and meet legal obligations.
• Improve performance, reliability, and product direction.

How information is shared

We do not sell personal information. We share information with service providers that help us run Orzeko, under agreements that limit their use of it:

• Amazon Web Services / Amazon Cognito — identity, authentication, and hosting infrastructure.
• Google — Google sign-in, when you choose it.
• Vercel — application hosting and aggregate analytics.
• Resend — delivery of waitlist and contact form notifications to our team.

Data retention

We retain personal information for as long as needed to provide the service, support beta participants, and meet legal, security, and operational requirements. Waitlist and contact submissions are kept until they are no longer needed for follow-up.

Security

We use tenant isolation, server-side permission checks, audit logging, and encryption in transit. No method of transmission or storage is perfectly secure, but we work to protect your information. See our Security overview for details.

Your choices and rights

Depending on your location, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To make a request, contact us using the details below and we will respond as required by applicable law.

Children's privacy

Orzeko is a business tool and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by updating the effective date above.