Privacy information
Updated 26 October 2026OrderSheet, offered under Unora, processes information to create accounts, manage the free trial and paid subscriptions, validate submitted purchase-order data, and respond to support requests. Contact hello@getordersheet.com for privacy questions or deletion requests.
Information processed
Supabase holds account email identifiers, subscription status, business/trial information, date ranges, feedback and SHA-256 document fingerprints used to avoid double-counting usage. OrderSheet is designed not to retain purchase-order content in its application database, but submitted content is processed transiently by hosting and validation services. Access and operational logs may be retained by infrastructure providers. Avoid submitting confidential or sensitive personal information unless an appropriate agreement is in place.
Payments
Stripe handles checkout, card details, recurring billing, invoices and customer self-service cancellation. OrderSheet stores Stripe customer/subscription identifiers, payment state, plan and billing periods so that access can be enabled after verified paid invoices. OrderSheet does not directly receive or store full payment-card numbers.
Service providers
Vercel hosts the website and processing endpoints, Supabase hosts authentication and structured account records, Stripe handles payments, and Resend can handle OrderSheet-branded transactional email and inbound support correspondence. When used through the separate ChatGPT integration, data may be processed by ChatGPT under the user's applicable terms and settings.
Retention and rights
Account, transaction and support records are retained as needed for operating the service and for applicable legal obligations. There is no configured automatic deletion schedule for all account and billing records yet. You can request access, correction or deletion where applicable by contacting us. Billing records may need to be retained for legal and accounting reasons.
Intended use
The beta is intended for business-to-business evaluation and relatively low-sensitivity document processing. Customers must ensure lawful collection and disclosure of any third-party personal data they submit. Formal data-processing terms may be required for ongoing processing of customer documents.