Last updated 22 July 2026. This policy explains how EffectX handles personal information in connection with Ordantra.
We collect the information needed to operate and secure Ordantra, and avoid surveillance payloads that do not belong in a service-management product.
For the agent's exact collection boundary, read Agent Security and Privacy.
Account and contact details; authentication and audit events; support requests and service records; billing and commercial details; and endpoint inventory or security posture configured by an organisation using Ordantra. The endpoint agent does not collect keystrokes, screenshots, personal file contents, camera, microphone, browser history, email bodies, or chat contents.
We use information to provide and secure Ordantra, authenticate users and devices, operate service workflows, respond to support, improve reliability, meet legal obligations, and communicate about the service. We do not sell personal information or use customer endpoint data for advertising.
An organisation using Ordantra controls the service records and endpoint data it places in its workspace. That organisation is responsible for notices, permissions, retention decisions, and responding to its users. EffectX processes that data to provide Ordantra and protect the service.
Access is limited by role and operational need. We may use vetted hosting, email, monitoring, identity, and support providers. Information may be processed outside Australia where those providers operate, subject to contractual and technical safeguards. We disclose information where required by law or to protect people, systems, and legal rights.
Ordantra uses encrypted transport, tenant boundaries, least-privilege access, audit records, protected backups, and per-device agent credentials. We retain information for the service term and legitimate operational, security, backup, and legal periods, then delete or de-identify it when no longer required. No system can guarantee absolute security.
You may ask to access or correct personal information, raise a privacy concern, or request deletion where applicable. Workspace users should normally contact their organisation first. We may need to retain limited records for security, legal, fraud-prevention, or backup purposes.