Privacy Policy

ORA ("we," "our," or "us") operates the website at oraleads.com and the ORA CRM platform (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this policy.

We use the information we collect to:

• Provide, operate, and improve the Service.
• Respond to inquiries submitted through our contact form.
• Send transactional emails (account creation, password reset, billing receipts).
• Send product updates and marketing communications — you can opt out at any time.
• Detect and prevent fraud, abuse, or violations of our Terms of Use.
• Comply with applicable legal obligations.

If you are located in the European Economic Area, we process your personal data under the following legal bases: performance of a contract (providing the Service), legitimate interests (improving the Service, preventing fraud), legal obligation, and consent (where required, such as for marketing emails or optional analytics cookies).

We use the following types of cookies:

• Strictly necessary — required for the Service to function (e.g., authentication session tokens). These cannot be disabled.
• Functional — remember your preferences and settings.
• Analytics — help us understand how visitors use the site so we can improve it. Only set if you accept cookies.

You can manage your cookie preferences through the cookie banner on our website or your browser settings. Declining cookies will not prevent you from using the Service, though some features may be limited.

We do not sell your personal information. We may share it with:

• Service providers who assist us in operating the platform (e.g., email delivery via Resend, cloud hosting via AWS). These providers are contractually obligated to protect your data and may only use it to perform services for us.
• Legal authorities when required by law, court order, or to protect the rights and safety of ORA and its users.
• Business transfers in the event of a merger, acquisition, or sale of assets, with notice provided to you.

We retain your personal data for as long as your account is active or as needed to provide the Service. CRM data you enter is retained for the duration of your subscription plus 30 days after cancellation to allow for data export. Contact form submissions are retained for up to 12 months. You may request deletion of your data at any time (see Section 9).

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest. No system is completely secure, and we cannot guarantee absolute security. We encourage you to use a strong, unique password for your account.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@oraleads.com. We will respond within 30 days.

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify registered users by email at least 14 days before the change takes effect. Continued use of the Service after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how we handle your data, please contact us at: