Privacy and Data Handling

Section 01

Scope

This policy applies to the Oro website, customer accounts, sales and affiliate inquiries, support communication, and the Oro software and connected services. It does not replace the privacy terms of a provider you connect through your own account or key.

Section 02

Information you provide

Oro collects information you provide, including your name, email address, account password, and any company, website, audience, workflow needs or messages you submit. Passwords are stored as hashes. Account and service records can also include email verification, policy acceptance, plan and credit status, device sign ins and account security events. Technical records needed to operate and protect the service can include request time, browser and device information, and network address.

Section 03

How information is used

Oro uses this information to create and secure accounts, verify email, deliver plan access and credits, link the app to an account, handle support, prevent abuse, operate the website and understand product problems. Information is not sold. Submitting a support, sales or account request does not by itself subscribe you to marketing.

Section 04

Local work and creative material

Oro is designed so useful image work can remain on your device. Local projects, sources and workflow material are not uploaded to the public website merely because you use the application. Material leaves the device only when you choose a connected feature, submit it through a form or deliberately upload it to a hosted service.

Section 05

Connected providers

When you use an Oro managed model feature or a provider connection you have added, the prompts, images, video or other material needed for that request are sent to the selected provider. The provider processes that material under its own privacy practices and Oro’s or your arrangements with it. Oro does not treat use of one feature as permission to send unrelated local project material.

Section 06

Automatic error reports

Oro sends automatic technical error reports only if you choose to enable them. Reporting is optional and off until you choose. You can enable or turn it off in Settings → Privacy → Send automatic error reports, including while offline. Your choice does not affect access to Oro, generation, credits or recovery.

Reports can include your app version, operating system, the operation or model involved, failure phase, recognized error codes, timings, sanitized source code stack traces and request identifiers. They can also include limited technical settings, such as quality, resolution, image dimensions, reference counts and file sizes. Reports sent while you are signed in are associated with your Oro account so we can match them with service records.

Automatic reports do not include prompts, images, video, audio, creative files, workflow or custom node names, filenames, personal file paths, provider keys or other credentials.

Raw logs, unrestricted exception messages, URLs, request and response bodies, and headers are excluded.

You can also choose Send error report on an individual Queue error without enabling automatic reporting. This sends only that error's sanitized technical report. If you are signed in, the report is associated with your Oro account so we can investigate it alongside service records. Sending one report does not enable future automatic reporting.

We process these optional reports with your consent. You can withdraw permission for future automatic reports in Settings. Turning it off cancels reports that have not been sent. Re-enabling it does not send cancelled reports. Reports already sent are not automatically recalled; contact gabriel@oro.tools about information already submitted. Records needed to operate and secure your account, manage credits or recover requests are separate and continue when optional reporting is off.

Section 07

Service providers

Oro uses infrastructure and service providers for website hosting, database storage, account and license services, email delivery and model processing. They receive information needed to perform those functions under applicable service arrangements.

Optional technical reports use Vercel for hosting and Neon for database storage. Pushover delivers limited operational alerts to Oro’s operator. These alerts may contain your Oro account display name, browser and platform, technical categories and report identifiers. They do not include email addresses, prompts or media. Service providers may process information outside your country.

Section 08

Website statistics

Oro uses Vercel Web Analytics on public website pages to measure visits, popular pages, referrers, countries, device types and selected link clicks. Download statistics count clicks, not completed downloads or installations. We do not collect form values, customer identifiers or creative material in these statistics. Private account pages, the publishing manager and content previews are excluded, and query parameters and fragments are removed before events are sent.

Vercel Web Analytics does not use tracking cookies. It derives a temporary visitor identifier from request information and discards the visitor session after 24 hours. Aggregate website statistics are available in our reporting dashboard for up to 12 months. We separately count verified accounts using existing Oro account records; those records are not sent to Vercel Web Analytics.

Section 09

Cookies and similar storage

Customer accounts and the private publishing manager use essential authentication and security cookies or similar storage to keep authorized sessions working. Public pages do not require an advertising profile. Public website statistics use the cookie-free analytics described above. Any additional optional tracking will be described in this policy, with relevant consent controls provided before it is introduced.

Section 10

Retention

Account information is kept while needed to provide access and for legitimate security and operational records. You can download an account export or request closure from your account page. After closure, information may be removed or anonymized, while records needed for legal, security, accounting or abuse prevention may be retained. Other submissions are kept only as long as needed for their purpose or legal obligations.

Unsent optional reports expire after seven days on your device. After a successful send, the local report is removed and its delivery receipt is kept within the same seven-day limit. Detailed optional reports are retained on Oro’s service for up to thirty days. Essential billing, security and recovery records have separate retention requirements.

Section 11

Security

Reasonable technical and organizational safeguards are used to protect personal information and administrative access. No networked system can guarantee absolute security. Do not send passwords, provider secrets or confidential production files through support, sales or other free text forms.

Section 12

Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection or a portable copy of personal information. Your account page provides export and closure controls. For other requests or help, contact gabriel@oro.tools with the email address connected to the account so the record can be located and the request can be verified.

Section 13

Children

Oro is not directed to children and the website does not knowingly seek personal information from anyone under the minimum age required to consent to online services in their jurisdiction.

Section 14

Changes to this policy

This policy may change as Oro’s services evolve. Material changes will be identified through a revised effective date and, where appropriate, a more direct notice.