Privacy Policy

Two kinds of data, two different roles

Orgalized is a backend platform that businesses ("operators") use to run their own operations, and BringTheFront is its front-end template and guides. Both are run by the same company. Because operators run their business on our platform, there are two very different relationships — and it matters which one applies to you.

Operator and visitor data — we are the controller. When you sign up for Orgalized or BringTheFront, or visit our marketing sites, we decide how your information (name, email, phone, billing, and how you use the platform) is handled. This Privacy Policy governs that data.

Operator content — we are a processor. When an operator loads its own business data into Orgalized — its CRM contacts, its customers’ details, quotes, invoices, and messages — the operator decides how that data is used. We only process it on the operator’s instructions, as their service provider. The operator is the controller, and the operator’s own privacy policy governs that data, not this one.

If you are a customer of a business that uses Orgalized and you want to access, correct, or delete your information, please contact that business directly. When they instruct us, we will help them respond.

What we collect about operators, and why

Account and identity: your name, business name, username, and password — to create and secure your account. Contact: your email, phone, and mailing address — for support, service notices, and account administration. Billing: your plan and transaction history — to charge for the service and prevent fraud. Usage and device: your IP address, browser and device, the pages and features you use, and log and error data — to operate, secure, and improve the platform. Communications: the support tickets and messages you send us — to respond and improve support.

Payments: your subscription billing is handled by our payment processor, Stripe. We do not store your full card number. When you, the operator, take payments from your own customers, that runs through your own Stripe account — see the note in "Who we share data with."

How we use it, and our AI commitment

We use operator data to provide, secure, bill for, support, and improve the platform; to communicate with you about the service; and to meet legal obligations. We use aggregated, de-identified usage data to improve the platform.

The Orgalized AI Coach uses AI to help you run your business — for example drafting messages, summarizing information, and suggesting next steps. It supports your decisions; it does not make automated decisions that have legal or similarly significant effects on anyone. Its output can be imperfect, so please review it before relying on it.

We do not use operator content or your customers’ data to train, fine-tune, or improve any third-party or foundation AI model. When the AI Coach processes your data, it does so only to generate a result for you.

Who we share data with

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We share data with the service providers that help us run the platform (below), with professional advisors such as lawyers and accountants, with authorities where the law requires, with a buyer in a merger or sale (with notice), and with others where you consent.

The service providers we rely on today: hosting and infrastructure (Render and Vercel, USA) to run the platform; transactional email delivery (our email provider, USA) to send account and service email; payment processing (Stripe, USA) to bill operators for their subscription; and product analytics (USA) to measure and improve the service. We keep this list current as our providers change.

A note on payments: when you (the operator) collect payments from your own customers, that runs through your own Stripe account under your own agreement with Stripe — in that case Stripe is your provider, not ours.

Cookies on our websites

On our marketing sites (orgalized.com and bringthefront.com) we use essential cookies (needed to run the site and keep you logged in), analytics cookies (to see how the site is used and improve it), and preference cookies. We do not use cookies to sell your data.

You can manage non-essential cookies through our cookie controls, and we honor Global Privacy Control (GPC) browser signals as an opt-out. Visitors in the EU and UK are asked to consent before we set non-essential cookies. Inside the Orgalized app, we use only the cookies needed to operate and secure the service.

How long we keep data, and deletion

Operator account data (which we control): we keep it while your account is active and for a limited period afterward to meet legal, tax, and dispute-resolution needs, then delete or de-identify it.

Operator content (which we process for you): we keep it while your account is active. When your account ends, you may export your data, and we will delete or return it within 30 days, except where the law requires us to keep it — in which case we isolate it and stop processing it. Deletions propagate to backups on our normal backup rotation.

How we protect data

We encrypt data in transit (TLS) and at rest, restrict access to authorized people on a need-to-know basis, and monitor our systems. Orgalized is multi-tenant: each operator’s data is logically isolated from every other operator’s, and the platform isolates end-customer contact information (such as email) as an added safeguard.

No system is completely secure and we cannot guarantee absolute security, but we work to protect your data and to notify you promptly of incidents that affect it.

Your privacy rights

If you are an operator or a visitor to our sites, we are the controller of your data. Depending on where you live, you may have the right to access, correct, delete, or port your data, to opt out of any "sale" or "sharing" (we do neither), and to limit use of sensitive information. California residents have these rights under the CCPA/CPRA; EU and UK residents have them under the GDPR, including the rights to object, to restrict processing, and to complain to a supervisory authority. We will not discriminate against you for exercising a right.

To exercise a right, contact us at privacy@orgalized.com.

If you are a customer of a business that uses Orgalized, your data is controlled by that business, not us. Please send access, correction, or deletion requests to that business directly; when they instruct us, we will help them fulfill your request.

Children

Orgalized and BringTheFront are business tools, not directed to children, and we do not knowingly collect personal information from children under 13 (or under 16 in the EU and UK). If we learn we have, we will delete it. Operators are responsible for making sure any data they load about their own customers complies with children’s privacy laws.

Where your data is processed

Orgalized is based in and hosts data in the United States. If you access the service from outside the US, your information will be transferred to and processed in the US. Operators in the EU or UK who need specific transfer safeguards for personal data protected by their local law should contact us.

Changes and contact

We may update this Privacy Policy. If changes are material, we will notify you by email or in the product before they take effect. The "Last updated" date at the top shows the current version, and continued use after changes means you accept them.

Questions or privacy requests: privacy@orgalized.com, or use the details on our contact page.