Privacy Policy

Oras Inc. ("Oras", "we", "us", or "our") operates the website at tryoras.com and the AI visibility and GEO tracking platform (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

• Account information. When you sign up, we collect your name, email address, and authentication identifiers. If you sign in with a third-party provider such as Google, we receive your basic profile information (name, email, and avatar) as permitted by that provider.
• Brand and project data. The brand names, domains, competitors, prompts, and keywords you choose to track within the Service.
• Billing information. When you subscribe to a paid plan, payments are processed by Stripe. We do not store your full card details; we retain only subscription status and limited billing metadata.
• Usage data. Log data, device and browser information, and interactions with the Service, used to operate, secure, and improve the product.

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To run AI visibility scans, GEO audits, citation tracking, and to generate reports you request.
• To process payments and manage your subscription.
• To communicate with you about your account, security, and product updates.
• To detect, prevent, and address fraud, abuse, and security issues.

3. How We Share Information

We do not sell your personal information. We share information only with service providers that help us operate the Service, under contractual confidentiality obligations:

• Supabase for authentication and database hosting.
• Stripe for payment processing.
• AI and data providers (such as model and search APIs) used to generate visibility scores and recommendations.

We may also disclose information if required by law or to protect the rights, safety, and security of Oras and its users.

4. Google User Data

If you connect a Google account, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google profile data solely to authenticate you and provide the Service, and we do not transfer or use it for advertising.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time, after which we will delete or anonymize it except where retention is required by law.

6. Security

We use industry-standard safeguards, including encryption in transit and access controls, to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and continuously improve our practices.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

8. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.

10. Contact Us

If you have questions about this Privacy Policy, contact us at support@tryoras.com.