Privacy Policy

Effective date: 25 February 2026

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our website, app, and related services.

1) Scope

This Privacy Policy applies to personal data processed when you:

• visit our website,
• create an account,
• log in using third-party login providers (e.g., Facebook/Meta, Google, Apple),
• use our app and related features (profiles, portfolios, bookings, messaging, uploads),
• contact support or otherwise interact with us.

2) Personal data we collect

We may collect the following categories of personal data (depending on how you use the Service):

A. Account & identity data

• Name, username/handle, email address, phone number (if provided)
• Password (stored in encrypted/hashed form where applicable)
• Account settings and preferences

B. Profile, portfolio & content data

• Profile details you choose to publish (bio, social links, location/region, etc.)
• Photos, videos, and other media you upload
• Messages and communications within the Service
• Content submitted for production, editing, or publishing via our tools/features

C. Transaction & billing data (if applicable)

• Purchase history, invoices, subscription status
• Payment status and transaction identifiers

Note: Payment card details are typically processed by payment providers and are not stored by us.

D. Social login data (Facebook/Meta, Google, Apple, etc.)

If you log in via a third-party provider, we may receive data such as your name, email, profile picture, and a unique user ID from that provider, depending on the permissions you grant. We do not receive your password for those services.

E. Technical & usage data

• IP address, device identifiers, device type, browser type, operating system
• Log files, crash reports, diagnostic data
• App/website usage and interaction data (pages viewed, features used, timestamps)

F. Cookies and similar technologies

We may use cookies, SDKs, pixels, and similar tools (see Section 10).

3) How we use your personal data

• Service delivery & account management: create/manage accounts; provide core functionality.
• Support & communications: respond to requests; send service notifications and confirmations.
• Safety, security & fraud prevention: protect accounts; detect abuse; enforce policies.
• Payments and subscriptions (if applicable): process payments; manage subscriptions; handle refunds; issue invoices.
• Analytics and improvement: debug, develop, and improve the Service.
• Marketing (where permitted): send marketing communications where you opted in or legally allowed.
• Legal compliance: meet legal obligations and respond to lawful requests.

4) Legal bases (GDPR)

Where the GDPR applies, we rely on these legal bases:

• Contract: to provide the Service you request.
• Legitimate interests: to secure, improve, and operate the Service (balanced against your rights).
• Consent: for optional marketing and certain cookies/trackers (where required).
• Legal obligation: for accounting, tax, and compliance requirements.

You can withdraw consent at any time (this does not affect processing already performed).

5) How we share personal data

We may share personal data with:

• Service providers (processors): hosting, cloud storage, analytics, support tools, email delivery, payment processors.
• Third-party login providers: providers process data under their own policies; we receive only what you authorize.
• Legal and regulatory disclosures: if required by law/court order or to protect rights, safety, and security.
• Business transfers: in case of merger/acquisition/asset sale, data may transfer with safeguards.

We do not sell your personal data.

6) International transfers

If we transfer personal data outside the European Economic Area (EEA), we use appropriate safeguards such as EU Standard Contractual Clauses (SCCs) and/or transfers to countries recognized as providing adequate protection, with additional safeguards where necessary.

7) Data retention

We retain personal data only as long as necessary for the purposes described: while your account is active, as needed to provide the Service, as required by law (e.g., accounting/tax retention), and to resolve disputes/enforce agreements. When no longer needed, we delete or anonymize it.

8) Security

We use reasonable technical and organizational measures to protect personal data (e.g., access controls, encryption in transit where applicable, secure hosting practices). No system is 100% secure, so we cannot guarantee absolute security.

9) Your rights (EEA/UK users)

Depending on your location, you may have the right to:

• access your personal data,
• correct inaccurate data,
• request deletion (“right to be forgotten”),
• restrict processing,
• object to processing (including direct marketing),
• data portability,
• withdraw consent,
• lodge a complaint with a supervisory authority.

Supervisory authority (Slovakia): Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR).

To exercise your rights, contact us at privacy@orabot.org.

10) Cookies & tracking technologies

We may use cookies and similar technologies for:

• essential functionality (login/session),
• preferences (language, settings),
• analytics (understanding usage),
• marketing (where permitted).

You can control cookies via your browser/app settings. Where required, we will request consent before placing non-essential cookies.

11) Third-party links

The Service may contain links to third-party sites. We are not responsible for their privacy practices. Review their policies before providing personal data.

12) Children’s privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

13) Data deletion (how to delete your data)

You can request deletion of your account and associated personal data by:

1. In-app / in-account (if available): Go to Settings → Account → Delete account (or similar), then follow the instructions.
2. By email: Send a request to privacy@orabot.org from the email linked to your account with the subject: Data Deletion Request. We may ask for verification to prevent unauthorized deletion.

If you logged in using Facebook/Meta or another provider, you can also remove the app connection in that provider’s settings, but you should still request deletion from us if you want data removed from our systems.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Effective date.” Material changes may be communicated through the Service or by email.