Privacy Policy

1) Information We Collect

We collect the following categories of information:

2) How We Use Information (Purposes & Legal Bases)

We use information to:

• Provide and operate the Services, accounts, dashboards, alerts, and APIs. (GDPR legal bases: contract; legitimate interests)
• Process payments and subscriptions; prevent fraud and abuse. (contract; legitimate interests; legal obligation)
• Maintain, secure, and improve the Services, including debugging, monitoring, analytics, and feature development (including AI‑assisted features). (legitimate interests)
• Communicate with you about the Service, updates, and transactional notifications. (contract; legitimate interests)
• Comply with law and enforce our Terms, including protecting rights, safety, and integrity. (legal obligation; legitimate interests)
• Personalize the experience (e.g., remembering settings). (consent where required; legitimate interests)

We will request consent where required (e.g., for certain cookies/analytics in the EU/UK, or for marketing emails where consent is the applicable basis). You can withdraw consent at any time via in‑product settings or the links provided.

3) Sharing & Disclosures

We share information with:

• Service providers / processors that help us host, operate, secure, analyze, and support the Services (e.g., cloud hosting, auth/database, payments, email delivery, analytics, logging/monitoring, customer support, market‑data and charting partners, AI model providers). These parties are contractually obligated to use information only to provide services to us.
• Business transfers (e.g., merger, acquisition, financing, or sale of assets).
• Legal compliance when required by law, subpoena, or to protect the rights, property, or safety of ORAKL, users, or the public.
• With your direction (e.g., when you connect third‑party apps or share content externally).

We do not sell your personal information for money. If we engage in activities considered a “sale” or “share” under applicable privacy laws (e.g., cross‑context behavioral advertising), we will provide required opt‑out mechanisms (see §8 and Cookie Policy).

4) International Data Transfers

We are based in the United States and may process information in the U.S. and other countries. Where required, we use Standard Contractual Clauses (SCCs) or other approved transfer mechanisms for personal data originating from the EEA/UK/Switzerland.

5) Security

We implement technical and organizational measures designed to protect information, including encryption in transit, access controls, least‑privilege practices, and monitoring. No system is 100% secure; please use strong passwords and enable additional security features we may offer.

6) Data Retention

We retain personal information for as long as needed to provide the Services and fulfill the purposes above, including to meet legal, accounting, or reporting requirements. Typical retention: active account lifetime + up to 24 months (or longer where required by law, to resolve disputes, or enforce agreements). We may retain aggregated or de‑identified data indefinitely.

7) Your Rights

Your rights depend on your location. Subject to applicable law, you may have the right to access, correct, delete, restrict or object to processing, port your data, or withdraw consent. To exercise rights, contact support@orakl.io. We may verify your request and deny requests where an exception applies.

8) Marketing; Cookies; Analytics

We may send administrative emails (e.g., transactions, security, service changes). You can opt out of non‑essential marketing emails via the unsubscribe link. For cookies/analytics/ads and your choices, see the Cookie Policy below.

9) Children’s Privacy

The Services are not directed to children and are intended for individuals 18+. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact support@orakl.io to request deletion.

10) Changes to This Policy

We may update this Privacy Policy. If changes are material, we will provide notice (e.g., email or in‑product). The “Effective date” above shows the latest update.