Privacy Policy

1. Introduction

Ori ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration information (name, email, password)
• Profile information (company, role, preferences)
• Data source credentials (encrypted and secured)
• Communication preferences and support requests
• Payment information (processed securely through Stripe, Flutterwave, Paystack)

2.2 Information Collected Automatically

• Device information (browser type, IP address, operating system)
• Usage data (pages visited, time spent, features used)
• Cookies and similar tracking technologies
• Analytics data (through Google Analytics if enabled)
• Error logs and performance metrics

2.3 Information from Third Parties

• Authentication providers (Clerk)
• Payment processors (Stripe, Flutterwave, Paystack)
• Data sources you connect (databases, APIs, files)

3. How We Use Your Information

• Provide and improve our services
• Process transactions and send related information
• Send promotional communications (with your consent)
• Respond to your inquiries and support requests
• Analyze usage patterns to improve user experience
• Detect and prevent fraud and security issues
• Comply with legal obligations
• Enforce our Terms of Service and other agreements

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files stored on your device that help us recognize you and enhance your experience.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can control cookies through:

• Our cookie consent banner (shown on first visit)
• Your browser settings
• Your account preferences

5. Data Security

We implement comprehensive security measures to protect your information:

• AES-256-GCM encryption for sensitive data at rest
• TLS 1.3 encryption for data in transit
• Secure credential storage with unique encryption keys
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Secure deletion of data when no longer needed

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account data: Retained while your account is active, then deleted within 30 days of account closure
• Transaction data: Retained for 7 years for tax and legal compliance
• Analytics data: Retained for 24 months
• Audit logs: Retained for 1 year
• Cookies: Retained according to their specific duration

7. Your Privacy Rights

7.1 GDPR Rights (EU/UK Users)

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

7.2 CCPA Rights (California Users)

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale or sharing of personal information
• Right to delete personal information collected
• Right to correct inaccurate personal information
• Right to limit use and disclosure of sensitive personal information

7.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@ori.ai. We will respond within 30 days.

8. Third-Party Sharing

We do not sell your personal information. We may share information with:

• Service providers (payment processors, analytics, hosting)
• Legal authorities (when required by law)
• Business partners (with your consent)
• Successors in case of merger or acquisition

9. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. By using our services, you consent to such transfers.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after such modifications constitutes your acceptance of the updated Privacy Policy.