Our Approach

Security is a core principle of Ordara. Our desktop-first architecture means your sensitive data — including order information and email credentials — is stored only on your device, never on our servers.

When using the optional web companion ("relay"), your order data is transmitted through our servers to your browser, but it is never stored — it passes through in real-time only. The web relay is entirely optional; Ordara functions fully as a standalone desktop application.

Security Practices

Local-First Data: Your data is stored locally on your device, encrypted at rest
Secure Authentication: We use industry-standard authentication through our partners
Encrypted Communications: All network communications use TLS encryption
Regular Updates: We regularly update our software to address security improvements

Responsible Disclosure

We value the security research community and appreciate responsible disclosure of any security vulnerabilities. If you believe you've found a security issue in Ordara, we encourage you to report it to us.

How to Report

Please report security vulnerabilities by contacting us through our support channels on Whop. Include as much detail as possible:

Description of the vulnerability
Steps to reproduce the issue
Potential impact
Any suggestions for remediation

What to Expect

We will acknowledge receipt of your report promptly
We will investigate and keep you informed of our progress
We ask that you give us reasonable time to address the issue before public disclosure
We will not take legal action against researchers who follow responsible disclosure practices

Contact

For security-related inquiries, please reach out through our Whop support channels or community Discord.