Privacy Policy

This Privacy Policy explains how Oryn (“Oryn”, “we”, “us”) collects, uses, and protects information when you visit our website or use the Oryn platform — a messaging automation service for WhatsApp, Instagram, and Facebook Messenger built on Meta’s official APIs. By using Oryn you agree to the practices described here. If you have questions, contact us at privacy@oryn.ai.

1. Information We Collect

Account information. When you create an account we collect your name, email address, password (stored as a salted hash), organization name, and billing details. Payment card data is collected and stored by our payment processors (Stripe and Razorpay), not by us.

Connected-channel data. When you connect a WhatsApp Business number, Instagram professional account, or Facebook Page, we receive data from Meta through the WhatsApp Cloud API and Messenger/Instagram Platform APIs: access tokens, channel identifiers, message content sent to and from your connected channels, contact identifiers (such as phone numbers or Instagram-scoped user IDs), delivery and read events, and comments or story replies that trigger your automations. We process this data solely to provide the service to you — routing it to your inbox, running the automations you configure, and generating replies you have enabled.

Usage data. We collect logs of how the platform is used (pages viewed, features used, IP address, browser type, timestamps) to operate, secure, and improve the service.

2. How We Use Your Information

We use the information we collect to:

• provide, operate, and maintain the Oryn platform, including delivering and receiving messages on your behalf via Meta’s APIs;
• run the automations and AI-assisted replies you configure — message content is sent to our AI model providers only to generate the responses you have enabled, and is not used by us to train models;
• process payments, send invoices, and manage subscriptions;
• respond to support requests and send service communications (such as quota alerts and security notices);
• monitor for abuse, fraud, and violations of our terms; and
• improve the product using aggregated, de-identified usage data.

We do not sell personal information, and we do not use the content of your customers’ messages for advertising.

3. Meta Platform Data

Data received from Meta’s platforms is handled in accordance with the Meta Platform Terms and applicable developer policies. We request only the permissions needed to operate the features you enable, use platform data only to provide the service to the business that connected the channel, and delete it when it is no longer required or when Meta or the channel owner asks us to. Disconnecting a channel or deleting your account triggers deletion of the associated platform data as described in Section 7.

4. Data Sharing and Disclosure

We share data only with service providers who process it on our behalf under contract: cloud hosting and database providers, Stripe and Razorpay for payments, AI model providers for the reply-generation features you enable, and email providers for transactional mail. We may also disclose information when required by law, to protect the rights and safety of Oryn or others, or as part of a merger or acquisition (in which case this policy continues to apply to previously collected data). A current list of sub-processors is available on request at privacy@oryn.ai.

5. Data Security

All traffic is encrypted in transit with TLS, and data is encrypted at rest by our infrastructure providers. Channel access tokens are stored encrypted. Access to production systems is restricted to authorized personnel and logged. No system is perfectly secure — if we learn of a breach affecting your data we will notify you without undue delay.

6. Your Rights

Depending on where you live (including under the GDPR and similar laws), you may have the right to access, correct, export, or delete your personal data, to restrict or object to its processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, email privacy@oryn.ai — we respond within 30 days. If your data was sent to a business that uses Oryn (for example, you messaged a company’s WhatsApp number), that business is the data controller; contact them directly, and we will assist them in fulfilling your request.

7. Data Retention and Deletion

We retain account data for as long as your account is active. Message and contact data is retained while the associated channel remains connected so your inbox history works. When you disconnect a channel, delete a workspace, or delete your account, the associated message content, contact records, and access tokens are deleted from production systems within 30 days and from backups within 90 days. Billing records are kept as long as tax and accounting laws require. You can request deletion at any time by emailing privacy@oryn.ai.

8. Cookies and Tracking

The Oryn platform uses cookies that are necessary to keep you signed in and to secure your session. Our marketing site may use privacy-respecting product analytics to understand aggregate usage; we do not use third-party advertising cookies or cross-site tracking.

9. Children

Oryn is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16 as an account holder.

10. Changes to This Policy

We may update this policy as the product evolves. Material changes will be announced by email or in-product notice before they take effect, and the “Last updated” date above always reflects the current version.

11. Contact Us

For privacy-related inquiries, or to exercise your rights, contact us at privacy@oryn.ai.