Security

How we keep RORDENS safe

Short answers, in plain language. The details are in the Privacy Policy.

What the desktop app is

A window of its own that opens rordens.ai/people. Same account, same conversations, same plan as the website.
Its code is public and short (about 70 lines): anyone can check that it only opens the RORDENS site. Addresses outside RORDENS, login and payment open in your system browser.
It does not run in the background, has no hidden updates and sends no telemetry.

Nothing, until you use "Release files". A window shows the files, you tick the ones the assistant may use, read the consent notice and confirm.
The assistant sees only what you ticked. Reading works on those files; saving, moving or deleting only happens after your OK on a confirmation card, action by action. There is no "allow all".
Deleted files go first to a recovery folder (.rordens-lixeira). Permanent removal needs a second, explicit confirmation.
Files with names of programs or scripts (such as .exe, .bat, .sh, .js) are never downloaded to your device by the assistant.
Text inside a file is never treated as an order: any change still needs your OK.
You can disconnect at any time and access ends immediately.

The content of the files the assistant reads is sent to RORDENS and to the AI provider (Anthropic, United States) only to answer you. RORDENS does not keep that content: it is not stored in the conversation or in audit logs.
Conversations and account data are stored in São Paulo (Supabase). Card data never reaches RORDENS: payment is handled by Stripe.
Your data is not sold and not used for advertising. See the Privacy Policy for retention periods and your rights under the LGPD.

The Mac app is signed with an Apple Developer ID and notarized by Apple.
The Windows installer is not signed yet: Windows may show a blue SmartScreen warning. We are obtaining a code-signing certificate; until then you can verify the file with the SHA-256 below.
Each version publishes a SHA256SUMS.txt file. Compare it with the file you downloaded (on Mac: shasum -a 256 <file>; on Windows: Get-FileHash <file>).
The installers are built in public by GitHub Actions from the public source, so the build log can be audited.

Found a flaw? Write to contact@rordens.ai with the subject "Security". We reply within 5 business days. Please do not disclose it publicly before we talk.