Privacy Policy

1. Introduction

Ordius Technologies respects the privacy of every individual and organization that uses the Ordius File Fingerprinting API. This Privacy Policy explains how information is collected, processed, protected, retained, and disclosed when Customers access or use the Service.

The Ordius File Fingerprinting API was designed around the principle of data minimization. The Service exists to generate deterministic cryptographic file fingerprints using the SHA-256 algorithm and to issue corresponding Ordius IDs. It is not designed to profile individuals, monitor user behavior, analyze file contents beyond what is necessary to perform deterministic fingerprinting, or build advertising profiles.

Ordius Technologies believes that privacy is an essential component of digital infrastructure. Accordingly, the Service is engineered to collect only the information reasonably necessary to provide, secure, operate, improve, and support the Ordius File Fingerprinting API while respecting applicable privacy and data protection laws.

This Privacy Policy applies to the Ordius File Fingerprinting API, the official Ordius website, API documentation, and other services operated by Ordius Technologies that expressly reference this Privacy Policy.

By using the Ordius File Fingerprinting API you agree to the practices described in this Privacy Policy.

2. Information We Collect

Ordius Technologies collects only the information reasonably necessary to operate, secure, support, and improve the Ordius File Fingerprinting API. The categories of information collected depend upon how the Service is used and the interactions initiated by the Customer.

Information provided directly by Customers may include contact information such as an email address, API Key identifiers, billing and transaction information necessary to process purchases of API Credits, and communications voluntarily submitted to Ordius Technologies through official support or business contact channels.

When Customers submit files for deterministic fingerprinting, the Service temporarily receives the uploaded file solely for the purpose of computing its SHA-256 cryptographic fingerprint and generating the corresponding Ordius ID. Unless expressly stated otherwise elsewhere in this Privacy Policy, uploaded files are not retained after processing beyond the temporary period reasonably necessary to complete the requested operation and maintain the operational reliability of the Service.

The Service also collects limited technical and operational information required to protect the integrity, availability, and security of the platform. Such information may include request timestamps, API request metadata, IP addresses, HTTP request information, system logs, usage metrics, and other operational records reasonably necessary for fraud prevention, abuse detection, troubleshooting, performance monitoring, security, and service reliability.

Ordius Technologies does not intentionally collect personal information that is unrelated to the operation of the Service, nor does it collect information for the purpose of advertising, behavioral profiling, or the sale of personal information.

3. Uploaded Files

Files submitted to the Ordius File Fingerprinting API are processed solely for the purpose of computing a deterministic SHA-256 cryptographic fingerprint and generating the corresponding Ordius ID. Uploaded files are not used to identify individuals, analyze document contents beyond what is technically necessary to perform the requested operation, train artificial intelligence models, build customer profiles, or support advertising activities.

Uploaded files are retained only for the temporary period reasonably necessary to receive, process, fingerprint, and return the requested result to the Customer. Following successful completion of processing, uploaded files are permanently deleted from the operational processing environment unless a longer retention period is expressly required by applicable law or is necessary to investigate a verified security, fraud, or operational incident.

Ordius Technologies does not maintain a permanent repository of Customer files. The Service stores the resulting SHA-256 fingerprint, the generated Ordius ID, and limited operational metadata necessary to operate, secure, and improve the Service. These stored records cannot be used to reconstruct the original uploaded file.

Customers remain solely responsible for ensuring that they possess the necessary rights, permissions, and lawful authority to upload files to the Service. Ordius Technologies acts only as the provider of the deterministic fingerprinting infrastructure and does not assume ownership of, or intellectual property rights in, Customer files.

4. Payment Information

Payments for API Credits are securely processed through authorized third-party payment service providers. Ordius Technologies does not directly collect, process, or store complete payment card numbers, security codes (CVV/CVC), expiration dates, bank account credentials, or other sensitive payment authentication information.

Ordius Technologies may receive limited transaction-related information necessary to confirm successful payment processing, manage Customer purchases, provide refunds where applicable, maintain accounting records, comply with legal obligations, prevent fraud, and provide customer support. Such information may include transaction references, payment status, purchase amounts, timestamps, currency, and similar billing records.

Payment information submitted during the purchase process is processed directly by the authorized third-party payment service provider in accordance with that provider's own privacy, security, and regulatory obligations. Customers are encouraged to review the applicable privacy policy of the payment service provider used to complete their purchase.

Ordius Technologies retains only the minimum billing and transaction information reasonably necessary to operate the Service, fulfill legal and accounting obligations, process refunds where applicable, resolve billing inquiries, and protect the integrity of the Service.

5. API Usage Information

To operate, secure, and maintain the reliability of the Ordius File Fingerprinting API, Ordius Technologies records limited operational information associated with API requests. This information is collected solely for infrastructure management, service reliability, abuse prevention, security, and operational support.

Operational records may include API Key identifiers, request timestamps, request and response metadata, IP addresses, HTTP methods, endpoint usage, response status codes, processing duration, request identifiers, system logs, and other technical information reasonably necessary for monitoring and maintaining the Service.

API usage information is not collected for the purpose of advertising, behavioral profiling, marketing analytics, or tracking Customers across unrelated websites or online services. Ordius Technologies uses API usage information only to understand the operational health, performance, security, and availability of the Service.

Aggregated and anonymized operational statistics may be generated for capacity planning, performance optimization, reliability engineering, security analysis, product improvement, and internal business reporting. Such aggregated information does not identify individual Customers or reveal the contents of Customer files.

Ordius Technologies retains API usage information only for as long as reasonably necessary to fulfill legitimate operational, security, accounting, legal, regulatory, and business purposes consistent with this Privacy Policy.

6. Cookies

The Ordius website and related services may use a limited number of cookies and similar technologies that are reasonably necessary for the operation, security, performance, and reliability of the Service.

These technologies may be used to maintain basic website functionality, remember user preferences where applicable, protect against fraudulent or abusive activity, improve website performance, and understand the operational health of the Service. Ordius Technologies does not use cookies to build advertising profiles or to track individuals across unrelated websites.

Where optional analytics or performance measurement technologies are used, Ordius Technologies will make commercially reasonable efforts to ensure that such technologies are configured in a privacy-conscious manner consistent with the data minimization principles described in this Privacy Policy.

Customers may control or disable cookies through their browser settings. Disabling certain cookies may affect the availability or functionality of portions of the Ordius website, but will not alter the deterministic operation of the Ordius File Fingerprinting API itself.

7. Data Security

Ordius Technologies implements commercially reasonable administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of information processed by the Ordius File Fingerprinting API. These safeguards are intended to reduce the risk of unauthorized access, disclosure, alteration, loss, or destruction of information processed through the Service.

Security measures may include encrypted communications, access controls, authentication mechanisms, infrastructure monitoring, audit logging, operational safeguards, software updates, vulnerability management, backup procedures, and other security practices appropriate to the nature of the Service and the information processed.

Although Ordius Technologies is committed to maintaining a secure operating environment, no method of electronic transmission, Internet communication, cloud infrastructure, or digital storage can be guaranteed to be completely secure. Accordingly, Ordius Technologies cannot guarantee absolute security and disclaims any representation that the Service is immune from all security risks.

Customers also play an important role in maintaining security. Customers are responsible for protecting their API Keys, securing their own systems and devices, controlling access to their credentials, and using appropriate security practices when interacting with the Service.

Ordius Technologies continually reviews and improves its security practices as the Service evolves, taking into account changes in technology, operational requirements, industry standards, and applicable legal obligations.

8. Data Retention

Ordius Technologies retains information only for as long as reasonably necessary to provide the Service, fulfill contractual obligations, maintain operational reliability, comply with applicable legal or regulatory requirements, resolve disputes, protect the security and integrity of the Service, and enforce the Ordius API Terms of Service.

Uploaded files submitted for deterministic fingerprinting are retained only for the temporary period reasonably necessary to receive, process, compute the SHA-256 fingerprint, generate the corresponding Ordius ID, and return the requested results to the Customer. Following successful processing, uploaded files are permanently deleted from the operational processing environment except where temporary retention is required by applicable law or to investigate a verified security, fraud, or operational incident.

Operational records, including API request metadata, transaction records, billing information, audit logs, and system logs, may be retained for longer periods where reasonably necessary for accounting, fraud prevention, abuse detection, security investigations, system diagnostics, legal compliance, or the continued operation of the Service.

SHA-256 fingerprints, Ordius IDs, and other deterministic outputs may be retained for as long as reasonably necessary to support the intended operation of the Service. These records do not contain the original uploaded files and cannot be used to reconstruct them.

When information is no longer required for the purposes described in this Privacy Policy, Ordius Technologies will make commercially reasonable efforts to securely delete, anonymize, or otherwise dispose of such information in accordance with its operational practices and applicable legal obligations.

9. Third-Party Services

Ordius Technologies may engage carefully selected third-party service providers to support the operation, security, availability, and administration of the Ordius File Fingerprinting API. These providers perform services on behalf of Ordius Technologies and receive only the information reasonably necessary to perform their respective functions.

Such third-party services may include payment processing, cloud hosting, content delivery, infrastructure monitoring, security services, analytics, email delivery, operational logging, backup services, and other technology providers reasonably necessary for the reliable operation of the Service.

Ordius Technologies does not authorize third-party service providers to use Customer information for advertising, behavioral profiling, or any purpose unrelated to the services they perform on behalf of Ordius Technologies. Third-party providers are expected to process information only in accordance with their contractual obligations, applicable law, and appropriate security and confidentiality practices.

Where third-party providers process personal information on behalf of Ordius Technologies, commercially reasonable efforts are made to select providers that maintain appropriate technical, organizational, and administrative safeguards consistent with the nature of the information being processed.

The use of third-party services may evolve as the Service grows. Accordingly, Ordius Technologies may replace, add, or remove service providers from time to time where reasonably necessary to improve the security, reliability, functionality, or operation of the Service, without changing the privacy principles described in this Privacy Policy.

10. Your Rights

Depending upon the laws applicable to the Customer's jurisdiction, Customers may have certain rights regarding the personal information processed by Ordius Technologies. Ordius Technologies is committed to respecting those rights and will make commercially reasonable efforts to respond to legitimate requests in accordance with applicable law.

Subject to applicable legal requirements, Customers may have the right to request access to personal information held by Ordius Technologies, request correction of inaccurate information, request deletion of information where appropriate, request restriction of certain processing activities, object to certain processing activities, or request a copy of information in a commonly used electronic format where such rights are provided by applicable law.

Customers may also withdraw consent for processing activities that rely upon consent as the legal basis for processing, where applicable. Withdrawal of consent does not affect the lawfulness of processing that occurred before such withdrawal and may affect the continued availability of certain features of the Service.

Ordius Technologies may decline or limit requests where permitted or required by applicable law, including where compliance would adversely affect the rights of other individuals, compromise the security or integrity of the Service, interfere with legal obligations, or prevent Ordius Technologies from maintaining records reasonably necessary for fraud prevention, accounting, contractual obligations, or regulatory compliance.

Customers wishing to exercise applicable privacy rights may contact Ordius Technologies using the contact information provided in this Privacy Policy. Reasonable information may be requested to verify the identity of the requesting party before fulfilling any request involving personal information.

11. Changes to this Policy

Ordius Technologies may revise or update this Privacy Policy from time to time to reflect changes in the Service, operational practices, technological developments, applicable law, regulatory requirements, or other legitimate business needs.

The most current version of this Privacy Policy will always be published on the official Ordius website. The effective date displayed at the beginning of this Privacy Policy indicates when the current version became effective.

Where commercially reasonable and where required by applicable law, material changes that significantly affect the processing of personal information or the privacy rights of Customers may be communicated through the official website, API documentation, or other appropriate communication channels before such changes become effective.

Continued access to or use of the Service after the effective date of an updated Privacy Policy constitutes acknowledgment of the revised Privacy Policy to the extent permitted by applicable law.

Previous versions of this Privacy Policy may be retained by Ordius Technologies for historical, legal, regulatory, operational, or compliance purposes.

12. Contact Information

Questions regarding this Privacy Policy, the processing of personal information, privacy-related requests, or other data protection inquiries may be directed to Ordius Technologies through the official contact channels below.

Ordius Technologies
Email: support@ordius.net
Website: https://ordius.net

Customers wishing to exercise applicable privacy rights or inquire about the processing of personal information should provide sufficient information reasonably necessary for Ordius Technologies to identify the relevant records and verify the identity of the requesting party before responding to the request.

Ordius Technologies will make commercially reasonable efforts to respond to privacy-related inquiries within a reasonable period, taking into account the nature, complexity, and legal requirements applicable to the request.