Privacy Policy

1. Data you give us

Account data: your email, name and password (passwords are handled by our authentication provider and never stored by us in plain text). Company and brand details you enter, such as brand context, mission and tone of voice.

Content: the sites you build, files and images you upload, documents you attach as context, and the messages you exchange with the AI assistant — these are stored so your workspace works and your history is available to you.

Billing: payments are processed by Stripe. We store your plan, subscription state and credit usage; we never see or store full card numbers.

2. Data from your sites' visitors

Form submissions: when a visitor submits a form on a site you published, we store the submitted fields on your behalf and email them to your team. You are the controller of this data; we process it only to deliver it to you.

Analytics: our built-in analytics for published sites are cookieless and do not build visitor profiles — a random per-tab session identifier lives only in the visitor's own browser storage and no personal information is collected.

3. How we use data

To operate the product: rendering and hosting your sites, running AI edits you request, tracking credit usage, sending transactional email (lead notifications, account emails), and keeping the platform secure (rate limiting, abuse prevention, audit logs of administrative actions).

We do not sell personal data, and we do not use your sites or content to train our own models.

4. Processors we rely on

Oryn runs on a small set of infrastructure providers that process data on our instructions: hosting and serving, database and authentication, enterprise AI model providers (your prompts and relevant site context are sent to fulfil each request you make), payment processing (Stripe), and transactional email delivery. Each provider processes only what its role requires; the current list is available on request.

5. Cookies

The Oryn app uses only essential cookies: keeping you signed in and remembering your session. No advertising or cross-site tracking cookies. Published sites, as served by Oryn, set no cookies for analytics.

6. Retention and deletion

We keep your data while your account is active. You can delete individual sites, assets, submissions and posts from the product, and you can request full account deletion — we then remove your personal data and content within a reasonable period, except what we must keep for legal or accounting reasons.

7. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. Write to us and we will honour them; if you are in a jurisdiction with a data-protection authority, you may also lodge a complaint with it.

8. Security

Data is encrypted in transit, access to production systems is restricted, and administrative actions inside Oryn are audit-logged. No system is perfectly secure — if we learn of a breach affecting your data we will notify you as the law requires.

9. Changes

We may update this policy as the product evolves; material changes will be announced before they take effect.

10. Contact

Privacy questions or requests: support@orynmade.com.