Privacy Policy
Effective October 8, 2026
The short version: Sully works on the supplier side of your store. We collect what we need to run it, we don't sell your information, we don't let AI providers train on it, and we only use cookies that keep you signed in.
1. Who we are
OnOrder is operated by Development Labs, LLC, a New Jersey limited liability company ("Development Labs", "we", "us"). This policy explains how we handle personal information on tryonorder.ai, in the OnOrder app at app.tryonorder.ai, in the OnOrder app for Shopify, and in emails our agents send and receive (the "Service"). For information about the people and businesses our customers work with, such as their suppliers, we process it on our customers' behalf as described below.
2. Information we collect
- Account information: your name, email address and profile photo from Google or Shopify sign-in; the store name you give us; your role in the store; and when you accepted our Terms.
- Store data from Shopify: purchase orders, vendors, products, inventory levels and locations, and order line items and quantities used to work out sales speed. We do not ask Shopify for your customers' names, addresses or contact details, and we don't use them.
- Supplier information: names, email addresses and messages of supplier contacts that you or your store provide, emails Sully sends to them, and replies they send to Sully's address.
- What you tell the agents: your chat messages, the rules and instructions you give, your settings, and the agents' replies and drafts.
- Usage and device information: IP address, approximate location, browser and device type, pages visited, and logs of actions and errors, which we use to run and secure the Service.
- Early-access list: your email address, the page you signed up from and your approximate country.
3. How we use information
- To provide the Service: syncing your store, tracking supplier orders, running the agents, and sending and reading supplier emails as your settings allow.
- To communicate with you about your account, the Service, security and, if you joined the early-access list, our launch.
- To secure the Service, prevent fraud and abuse, and fix problems.
- To improve the Service, including using aggregated, de-identified information that does not identify you, your store or your suppliers.
- To meet legal obligations and enforce our Terms.
4. AI processing
Sully and our other agents run on AI models from OpenAI. To answer you or draft a message, we send the relevant parts of your conversation, store data and supplier information to the model. Under our provider's API terms, this data is not used to train their models, and the provider may keep it for up to 30 days to monitor for abuse before deleting it.
AI output can be wrong. Check important details before relying on them. See section 3 of our Terms.
5. Legal bases (EEA, UK and Switzerland)
- Performing our contract with you: providing the Service you signed up for.
- Legitimate interests: securing and improving the Service, and contacting suppliers on our customers' instructions. We balance these against your rights.
- Consent: where we ask for it, for example joining the early-access list. You can withdraw it at any time.
- Legal obligations: where the law requires us to keep or disclose information.
7. If you're a supplier
If a store uses OnOrder, Sully may email you about that store's purchase orders and read your replies. We process your contact details and messages on the store's behalf to manage its orders. To ask about or remove your information, contact the store, or email us at hello@tryonorder.ai and we'll help.
9. How long we keep information
- Account and store data: while your account is active.
- When a store uninstalls OnOrder or closes its account: we delete or de-identify its data within 30 days, and sooner when Shopify's data-deletion requests require it, unless we must keep it to meet legal obligations.
- Logs and backups: up to 30 days.
- Early-access list: until you ask us to remove you, or 12 months after launch if you don't become a customer.
10. Security
We encrypt data in transit and at rest, store connection tokens encrypted, restrict access to staff who need it, and keep each store's data separate. No system is perfectly secure; if a breach affects your information we will notify you as the law requires.
11. International transfers
We are based in the United States and store data there. If you are outside the United States, your information is transferred to and processed in the United States. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
12. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy of it;
- correct it, or delete it;
- object to or restrict certain processing, and withdraw consent;
- opt out of the sale or sharing of personal information (we don't sell or share it), and limit use of sensitive information;
- not be discriminated against for using these rights; and
- complain to your local data protection authority.
To use these rights, email hello@tryonorder.ai. We'll verify your request and respond within the time the law allows (usually 30 to 45 days). You can use an authorized agent where the law permits. If you use OnOrder through your employer's store, we may refer your request to the store.
13. Children
The Service is for businesses and is not directed to anyone under 18. We don't knowingly collect information from children.
14. Changes to this policy
We'll update this policy as the Service changes. If a change is material, we'll tell you in the Service or by email before it takes effect. The effective date above shows when it last changed.
15. Contact
Questions or requests: hello@tryonorder.ai. Development Labs, LLC, New Jersey, United States.