Last updated: 12 August 2026
Information We Collect
We collect information you provide directly to us, such as your name, email address, business details, review links, billing information, support messages, and the content you submit to the product. We also receive technical information needed to secure and operate the service, such as device, browser, request, and diagnostic data.
Retention and Your Rights
Account and business data is retained while your account is active. Leads and public demo events are retained for 90 days; feedback, review-link clicks, and integration events for 365 days; cron history for 30 days; and rate-limit state for 2 days. Demo challenges and verification records are removed after expiry. You may export or permanently delete your account data through the privacy API or by contacting privacy@ornigami.com.
We use Google, OpenAI, Resend, Stripe, Sentry, Neon for the service workflows described here. Google for Business Profile access and OAuth, OpenAI for AI-generated reply drafting and profile/content assistance, Resend for email delivery, Stripe for payments, Sentry for error monitoring, and Neon for database hosting. Google OAuth tokens are encrypted before storage. Those providers may process information in other countries; we use the safeguards required for the applicable transfer and service arrangement.
How We Use Your Information
We use the information we collect to provide, maintain, and improve our services, process transactions, authenticate access, prevent abuse, send requested notifications, provide support, and communicate important service or account changes. We do not sell personal information.
Your Choices and Complaints
You can update your account and business details in Settings, unsubscribe from optional follow-up messages, and request a copy or deletion of your data. You may also complain to the data protection authority where you live or work if you believe your rights have not been respected.
Cookies and legal bases
Ornigami uses essential cookies and browser storage for authentication, security, rate-limiting, and saved preferences. We do not use those technologies to sell personal information. Where GDPR applies, we process account data to provide the service, meet legal obligations, protect the service, and with your consent where consent is required.
You may request access, correction, portability, restriction, or deletion of your data, and may object to processing where applicable. Contact privacy@ornigami.com to exercise these rights.
Data Security
We implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure.
Contact
If you have questions about this Privacy Policy, please contact us at privacy@ornigami.com