Privacy Policy

Account information. When you register, we collect your name, email address, organisation name, and other details you provide.

Usage data. We collect logs of how you interact with our platform — pages visited, features used, API calls made, and error events — to improve reliability and performance.

Content you upload. Documents, data, and files you upload to ORIS products are stored on your behalf and processed only to deliver the services you request.

Payment data. Billing information is processed by our payment provider (Razorpay). We do not store full card numbers on our servers.

Device and technical data. IP address, browser type, operating system, and session identifiers collected automatically when you access our services.

We use collected information to:

• Provide, operate, and improve ORIS platform and products
• Authenticate your identity and manage your session securely
• Process payments and maintain billing records
• Send transactional emails (account alerts, invoices, security notices)
• Detect and prevent fraud, abuse, and security incidents
• Comply with applicable Indian laws and regulations
• Respond to your support requests

We do not sell your personal data to third parties.

Your data is stored on servers located in India. We apply AES-256 encryption for sensitive fields at rest, TLS 1.2+ in transit, row-level access controls to isolate tenant data, and regular security reviews.

Sensitive identifiers (Aadhaar numbers, PAN) are hashed or encrypted and never stored in plaintext, in compliance with applicable Indian law.

We share data only with:

• Service providers — cloud infrastructure, email delivery, payment processing — under data processing agreements
• AI providers — content you submit for AI processing may be sent to third-party LLM providers (Anthropic, Google, Groq, etc.) under their respective terms
• Legal authorities — when required by Indian law, court order, or regulatory obligation

We use session cookies required for authentication and security. We do not use advertising trackers or third-party analytics cookies by default. You can clear cookies at any time through your browser settings; doing so will sign you out of your session.

Under applicable Indian law (including the Digital Personal Data Protection Act, 2023), you have the right to:

• Access a summary of personal data we hold about you
• Correct inaccurate personal data
• Request erasure of your personal data (subject to legal retention obligations)
• Withdraw consent where processing is consent-based
• Nominate a representative to exercise rights on your behalf

To exercise these rights, email privacy@meetoris.com. We will respond within 30 days.

We retain account data for the duration of your subscription and up to 3 years after closure, unless a longer period is required by law. Uploaded documents are retained per your configured retention policy; you may delete them at any time from within the product.

ORIS is a business platform intended for users aged 18 and above. We do not knowingly collect personal data from minors.

We may update this policy from time to time. We will notify you by email and post the updated policy at meetoris.com/privacy with a revised "Last updated" date. Continued use of the platform after the effective date constitutes acceptance of the changes.

For privacy queries, data requests, or complaints: