Privacy

1. What this covers

Ordio is operated by Greetyr. This policy covers the Ordio application and the ordio.church website. It does not cover Memento, our Mass intention register, which is a separate product with a separate database and its own policy.

2. What we store

Account details for people who sign in: name, email address, and a password we never see in plain text because authentication is handled by Supabase.

Parish details: the parish name, its time zone, its rooms, its Mass and event schedule, and its ministry roles.

People the parish schedules: name, and the contact details the parish chooses to record so it can send a schedule. Most of these people have no account with us and never will.

Assignments and answers: who was asked to serve, when, and whether they accepted.

A log of changes, with who made each one and when, which is how a parish answers the question of why something moved.

3. What we do not store

Card numbers. Payment is handled by Stripe and card details never reach our servers.

Anything a parish did not enter. We do not buy, enrich or infer contact data.

Sacramental records, Mass intentions, offerings, or anything else that belongs in a register rather than on a calendar.

4. Who can see it

Only members of that parish, and only according to their role. Every table is protected in the database itself rather than only in the application, so a mistake in our code cannot show one parish another parish's calendar.

A parish may publish its schedule to its own website. Only what it marks public appears there, and no personal contact details ever do.

We access a parish's data to fix a fault it has reported, and otherwise not at all.

5. Getting it back, and having it erased

A parish may export its full calendar and roster at any time, as a file it can open.

A parish may close its account from the billing page. We erase its data within thirty days, other than the minimum we must keep for tax and accounting.

An individual may ask to be removed from a parish's roster by asking the parish, which holds the record. If you cannot reach them, write to us and we will help.

6. Where it lives

In the United States, with Supabase (database and authentication), Vercel (hosting), Stripe (payment) and Resend (email). Each is bound by its own agreement with us and none of them sells parish data.

7. Changes and contact

We will say what changed and when, rather than only updating a date at the top. Write to hello@greetyr.com with anything at all.