Privacy Policy

1. Information we collect

We collect information you provide directly, such as account details, team member data, appointment records, and business configuration information.

We also collect technical data like device, browser, usage logs, and diagnostics to keep the service secure and operational.

2. How we use information

We use data to provide and operate Orya, process bookings and workflows, maintain security, and deliver customer support.

We may also use aggregated or de-identified data for analytics, product improvements, and service reliability.

3. Legal basis and processing roles

When you manage customer information through Orya, your business generally acts as the data controller for that customer data, and Orya acts as a processor.

For account administration, billing, fraud prevention, and platform operations, Orya may act as a controller as required by law.

4. Data sharing

We may share data with service providers that support hosting, payments, analytics, messaging, and support operations under contractual safeguards.

We may disclose information when required by law, legal process, or to protect rights, safety, and platform integrity.

5. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, improve performance, and understand usage patterns.

Browser settings can control cookies, but disabling them may impact some platform features.

6. Data retention

We retain personal data for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods vary by data type, contractual requirements, and applicable law.

7. Security

We apply technical and organizational measures to protect data against unauthorized access, alteration, disclosure, and destruction.

No security method is perfect, but we continuously monitor and improve our safeguards.

8. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data, and to object to certain processing activities.

To exercise these rights, contact your salon administrator first (for booking/customer data) or contact Orya support for account-level requests.

9. International transfers

Your information may be processed in countries other than your own. Where required, we use contractual and legal safeguards for cross-border transfers.

10. Changes to this policy

We may update this Privacy Policy periodically. The Last updated date indicates when the latest revision became effective.

Continuing to use Orya after updates means you acknowledge the revised policy.