Scope

This policy covers the public Ortelian website at ortelian.com, including its pages, notes, newsletter form, contact form, and contact links. It does not cover the Ortelian application, customer projects, private workspaces, product environments, or services that have their own agreement or notice.

Controller

This website is operated by Ortelian, Inc., a Delaware corporation. Ortelian, Inc. is the controller of the personal data described in this policy.

Ortelian, Inc.
131 Continental Dr, Suite 305
Newark, DE 19713, United States
Delaware corporation

For privacy questions or requests, email laurens@ortelian.com.

What we collect

Website delivery data. When you load the site, Cloudflare and related delivery infrastructure process request data such as IP address, requested URL, browser details, timestamps, and security signals to serve, secure, and troubleshoot the site.
Newsletter data. If you subscribe through the newsletter form, we collect your email address and a small source label, such as the page where the form was shown. Our server on Cloudflare passes this to Substack, which manages the list. Our server does not store your address, and its diagnostic logs record only whether a signup worked, never your address. We use this only for the Ortelian notes/newsletter, not for unrelated sales outreach.
Direct contact data. If you use our contact form or email us, we receive your email address, the content of your message, and ordinary metadata needed to receive and reply to it. Contact form submissions are processed by Web3Forms.
Analytics data. The site uses Open Analytics to understand aggregate website traffic and whether important site actions occur. It measures page URL, referrer, campaign parameters, coarse browser, operating-system and device classes, approximate location, engagement, performance, and the custom events we define. It sets no cookies, stores nothing in your browser, and does not store raw IP addresses or form values.
Company-level visitor identification data. The site uses Dealfront / Leadfeeder Web Visitors to understand which companies visit the public website. Dealfront may process request and visit data such as IP address, page URL, referrer, campaign parameters, browser and device details, timestamps, visit duration, and pages viewed in order to identify visiting companies and show company-level website activity. We use this at company level, not to identify individual visitors, retarget ads, or make automated decisions about people. We do not use Dealfront form tracking on this site.

Why we use it

To publish, secure, maintain, debug, and improve the website.
To send the Ortelian notes/newsletter when you ask to receive it.
To respond when you contact us.
To understand aggregate site performance and which writing or pages are useful.
To understand which companies visit the public website and which pages they view, so we can evaluate account-level interest in Ortelian.
To comply with legal obligations and protect the site, Ortelian, and others.

Legal bases

Consent. We use consent for newsletter subscriptions and any optional communications you ask to receive. You can withdraw consent at any time.
Legitimate interests. We rely on legitimate interests to operate, secure, debug, improve, and measure the public website; understand company-level interest in Ortelian; and protect the website and our business. We use privacy-friendly aggregate analytics and company-level visitor identification, and do not use the public website for targeted advertising.
Pre-contractual steps. If you contact us about working together, we use your message and contact details to respond and take steps before a possible agreement.
Legal obligation. We may process or keep information where law requires it.

When you provide data

You are not legally or contractually required to provide personal data through this website. Newsletter signup is voluntary; if you do not provide an email address, we cannot subscribe you. Contacting us is voluntary; if you do not provide contact details or message content, we may not be able to reply.

We do not sell personal data or share it for cross-context behavioral advertising. We use a small set of providers:

Cloudflare for hosting, CDN, DNS, security, deployment, and passing newsletter signups to Substack.
Open Analytics for privacy-friendly aggregate analytics.
Dealfront / Leadfeeder for company-level website visitor identification.
Substack for newsletter signup and email-list management.
Web3Forms for processing and delivering contact-form submissions.
Email, legal, accounting, or professional-service providers when needed to receive messages, run the business, or comply with law.

We may also disclose information if required by law, to protect rights or security, or in connection with a merger, financing, acquisition, or similar business transaction.

International transfers

Because Ortelian, Inc. is in the United States, website data may be processed in the United States. Some providers also operate globally. Where required, we rely on applicable safeguards such as provider data-processing terms, certifications, standard contractual clauses, or other lawful transfer mechanisms. Open Analytics states that visitor analytics data is processed and stored in the EU.

Retention

Newsletter data is kept until you unsubscribe, ask us to delete it, or we no longer run the notes/newsletter. We may keep minimal suppression records where needed to honor opt-outs.
Contact emails are kept for as long as needed to respond, manage the relationship, and maintain ordinary business records.
Website delivery and security data is kept by our infrastructure providers according to their policies and only for as long as needed for delivery, security, debugging, and compliance.
Open Analytics is aggregate site measurement and is not used by us to identify individual visitors.
Dealfront visitor data is kept according to our Dealfront account settings and only for as long as needed to review company-level website interest, improve the website, and manage ordinary business records.

Cookies and browser storage

Open Analytics sets no cookies, stores nothing in your browser, and honours Global Privacy Control and Do Not Track. Dealfront consent management mode is enabled in Dealfront, and this site does not call Dealfront's cookie acceptance function. That means Dealfront should not set its visitor cookies unless a separate consent flow is added later. Cloudflare may use strictly necessary security cookies if security features are triggered.

Your choices and rights

You can unsubscribe from newsletter emails using the unsubscribe link in those emails or by contacting us. Depending on where you live, you may also have rights to access your personal data; correct inaccurate personal data; request deletion; restrict processing; object to processing based on legitimate interests; receive your data in a portable format where the right applies; and withdraw consent where processing is based on consent. These rights are not absolute and may depend on the circumstances and applicable law.

To exercise those rights, email laurens@ortelian.com. Where applicable, you may also lodge a complaint with your local data protection authority. For people in the EEA, this can be the authority where you live, work, or where the issue happened; the European Data Protection Board keeps a list of EU and EEA authorities.

Limits

We do not knowingly collect personal data from children through this website. We do not process sensitive personal data through this website. We do not use website visitors' personal data for automated decision-making, targeted advertising, cross-context behavioral advertising, or sale.

Changes

We may update this policy when the website, providers, or legal requirements change. The latest version will be posted here with its updated date.