Data protection guidelines

Ormi is a field service management platform operated by Ormi FSM LLC, a Texas limited liability company (the data controller for the purposes of this Privacy Policy). Ormi is designed for service businesses like lawn care, pest control, HVAC, plumbing, and pool maintenance. We are committed to protecting your privacy and handling your information transparently.

Ormi privacy policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit, subscribe, register, make a purchase from, or use Ormi websites, apps, and services, including the Ormi Field mobile app, available through https://ormi.com.

Last updated: October 26, 2026

Ormi Field mobile app location data

Ormi Field is used by technicians and field staff to manage active jobs, communicate job progress, capture job records, and accept eligible in-person payments. Some mobile features require location access so the business account can coordinate work in the field.

Location data collected - The Ormi Field mobile app may collect precise and approximate device location data, including latitude, longitude, accuracy, speed, heading, timestamps, and the active job identifier when a technician chooses to use location-enabled job features.
Background location - This app collects location data to enable live dispatch ETA, customer tracking links, route progress, and job-site arrival reminders even when the app is closed or not in use.
How location data is used - We use location data to show dispatchers technician progress for active jobs, estimate arrival times, support customer-facing tracking links for an active job, trigger job-site arrival reminders, attach optional proof-of-work metadata to photos or signatures, support time and job-status workflows, prevent fraud and meet card-network requirements for in-person Tap to Pay transactions, and maintain security, audit, and troubleshooting records.
Who location data is shared with - Location data may be shared with the Ormi business account that employs or manages the technician, authorized office staff and dispatchers for that account, customers who receive an active job tracking link, and service providers that help us operate Ormi, such as hosting, storage, security, analytics, mapping, payment, and support providers. We may also disclose information when required by law or to protect rights, safety, and security.
Control and retention - Technicians can stop active location sharing from the job or location sharing screen, by ending the active job workflow where available, or by changing device location permissions. We retain location data only as needed to provide the service, keep job, payment, security, and audit records, comply with legal obligations, resolve disputes, and enforce agreements.
No advertising sale - We do not sell location data and do not use precise location data for third-party advertising.

Ormi Field mobile app sign-in and device authentication

Ormi Field supports account sign-in with Ormi credentials, approved single sign-on options, and optional device biometric sign-in for users who choose to enable it.

Biometric sign-in - If you choose to enable biometric sign-in in the Ormi Field mobile app, Ormi stores an encrypted sign-in credential on your device so you can unlock your Ormi session faster. Your device operating system handles biometric verification, such as Face ID, Touch ID, fingerprint, face recognition, or iris recognition. Ormi does not receive, collect, store, or share biometric templates, face images, fingerprint images, or iris images.
User control - Biometric sign-in is optional. You can enable or disable it from the mobile app profile screen, and you can always sign in with your account password or approved single sign-on option instead.
Session security - If a saved biometric session no longer matches the signed-in Ormi account, expires, or cannot be verified, the app removes the saved biometric credential and asks you to sign in again.

Connected mailboxes: Gmail, Google Workspace and Outlook

A business using Ormi can choose to send customer email from its own Gmail, Google Workspace, Outlook or Microsoft 365 mailbox. This section explains what Ormi receives when it does.

What Ormi asks for - When a business connects a Gmail or Google Workspace mailbox in Ormi, Ormi asks Google for one permission: gmail.send, to send email on the business's behalf. With it Ormi receives the mailbox's email address and a token that lets it send. Ormi cannot read, search, delete or change anything in the mailbox, and does not ask for contacts, calendar or files through this connection. Connecting an Outlook or Microsoft 365 mailbox works the same way, with Microsoft's send permission.
How it is used - Only to send the messages the business sends from Ormi to its own customers, such as quotes, invoices, receipts and appointment reminders, from the business's own address. Ormi stores the mailbox address and the sending token, encrypted, and keeps a record of each message it sent (recipient, subject, time and the message ID Google returns) in the business's communication history.
What Ormi never does with it - Ormi does not use data received from Google or Microsoft for advertising, does not sell it, does not use it to train artificial intelligence models, and does not let people read it except with the business's permission for support, when required for security or by law. It is not shared with anyone except as needed to send the messages described above.
Disconnecting - A business can disconnect the mailbox at any time in Ormi under Apps, Customer email. Ormi then deletes the stored token and, for Gmail, asks Google to revoke it. The mailbox owner can also remove Ormi's access directly at myaccount.google.com/permissions or in their Microsoft account settings.
Google API Services User Data Policy - Ormi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Ormi’s AI assistant (Marni)

Marni is the AI assistant on ormi.com, in the Ormi web app, in the Ormi Field app and in the customer portal. This section explains what Marni sends to AI model providers, what is kept and for how long, and what Marni can change.

Which AI models answer - Marni's answers are written by AI models run by two providers. On ormi.com, Cloudflare Workers AI answers, using Meta's Llama 3.3 70B model on Cloudflare's network. In the Ormi web app, the Ormi Field app and the customer portal, OpenRouter answers, routing each request to an open-weight model (OpenAI's gpt-oss or Google's Gemma) hosted by a provider OpenRouter selects. OpenRouter also writes the AI drafts in Ormi: translations, quote drafts, review replies and dispute summaries. If one provider is unavailable, the request goes to the other.
What is sent to them - Each time you ask Marni something, the provider receives your message (up to 4,000 characters), instructions Ormi writes, the page or screen you are on, and the date and time zone. In the apps it also receives your company name and the earlier messages in the conversation, up to the last 30 turns; on ormi.com only the current message is sent. In the Ormi web app and Ormi Field, Marni can look things up in your Ormi account with exactly the permissions of the person asking, and what it reads (for example customers, jobs, schedules, invoices, estimates or equipment) is sent to the provider so it can answer. In the customer portal it reads only that customer's own records. An AI draft sends the text being drafted and the details it needs, such as a job description and price-book items, or a review and your business name.
Changes need your confirmation - In the Ormi web app and Ormi Field, Marni does not change anything on its own. Every change it proposes, such as creating a job, sending a text or updating a customer, is shown to you first and happens only if you confirm it, and higher-risk changes ask a second time. Ormi's servers refuse a change from Marni that was not confirmed. In the customer portal Marni can only read. On ormi.com, when you ask Marni to have our team contact you or to book a demo, it passes the name, email address, phone number and topic you give it to Ormi's sales team.
What is kept, and for how long - Ormi does not store Marni conversations on its servers. The conversation is kept in your browser on the device you use: the last 60 messages in the Ormi web app and customer portal, the last 20 on ormi.com. Clear history in Marni's menu removes it, as does clearing your browser's site data. In Ormi Field it is held in memory and is gone when the app closes. If you rate an answer, we keep the rating and any reason you type for 90 days, without the conversation. To answer quickly, Marni may keep what it looked up in your account for up to 60 seconds, and a confirmed change and its result are kept for one hour so the same change cannot run twice. Ormi records which Marni actions were used and their outcome, without the conversation text. To stop abuse, we keep a hashed form of your IP address for up to 30 minutes after a bot check and count requests per IP address for rate limits.
Training - Ormi does not use your conversations or your account data to train or fine-tune AI models, and does not sell them. Ormi has not set these providers to promise that they will not keep or learn from the requests they process, so we do not make that promise for them: their own terms apply. See Cloudflare's privacy policy and OpenRouter's privacy policy.
Your choices - Marni is optional, labelled as AI and not a human, and never needed to use Ormi. Leave out anything you would rather not send to an AI provider. To ask about anything Marni processed, email [email protected].

Personal information we collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and cookies installed on your device. Additionally, as you browse the Site, we collect information about the individual pages you view, what websites or search terms referred you to the Site, and how you interact with the Site. We call this automatically-collected information "Device Information."

Cookies – Data files placed on your device, often including an anonymous unique identifier. ( Learn more about cookies and how to disable them: http://www.allaboutcookies.org )
Log Files – Track actions on the Site and collect IP address, browser type, ISP, referring/exit pages, and timestamps.
Web Beacons, Tags, and Pixels – Electronic files to monitor site usage and interaction.
Google Analytics and Pixels – Collect traffic-related information and interaction behavior.

When you make or attempt to purchase through the Site, we collect information such as your name, email address, billing address, shipping address, payment details, and any other relevant data necessary to process your order.

Privacy & Security

Protected

Data Encryption

All data encrypted in transit and at rest

GDPR Compliant

Your data, your control

How we use your personal information

We use the collected Order Information to:

Process your orders, payments, and generate invoices
Communicate with you
Screen for potential fraud or risks
Provide you with information or promotions related to our services, when aligned with your preferences

We use the collected Device Information to:

Improve and optimize the Site experience
Analyze customer interactions for performance tracking
Screen for potential risk and fraud

Sharing your personal information

We share your Personal Information with trusted third-party service providers to help us operate effectively:

Google Analytics: To understand customer interactions and optimize experience (Learn more: Google Privacy Policy)
Payment processors (PayPal, Stripe)
AI model providers for Ormi's AI assistant, Marni (Cloudflare and OpenRouter): see Ormi's AI assistant (Marni)

Your rights

If you are a resident of the European Economic Area (EEA):

You have the right to access, update, or delete your personal information.
If you wish to exercise these rights, please contact us at [email protected]

Do not track

Please note, we do not alter our Site's data collection practices when we detect a "Do Not Track" signal from your browser.

Data retention

We will retain your Order Information for our records unless you ask us to delete this information.

Minors

Our Site is not intended for individuals under the age of 18.

Changes

We may update this Privacy Policy periodically to reflect changes to our practices or for other operational, legal, or regulatory reasons.

Get Started

Ready to run the entire operation?

If you have any questions, feel free to reach out to our team.

No credit card required
Office staff are free

Data protection guidelines