Privacy policy

OramaSearch, Inc., a Delaware corporation, is the entity responsible for the personal data described in this policy.

This policy explains how Orama collects, uses, and shares personal information when you visit orama.com, contact us, create an account, or use Metis, Orama Studio, Zetta, and our other services (the “Services”).

When a customer uses the Services to process data about its own customers, employees, or other people, Orama processes that data on the customer’s behalf, as a processor or service provider, under our agreement with that customer. The customer’s own privacy policy governs that data, and requests about it should go to the customer first.

Information you give us:

• Sales and contact requests: your name, work email, and company, and, if you choose to share them, your company size, what you want Metis to do, and when you want it live.
• Account information: your name, email address, organization, and sign-in details when you create or use an account.
• Billing information: billing contact and payment details if you buy online. Payments are handled by our payment provider, and we do not store full card numbers.
• Communications: the content of emails, support requests, and notes from calls and meetings with us.

Information collected automatically:

• Site analytics: the pages you view, the links and buttons you click, the page that referred you, your browser and device type, and approximate location derived from your IP address. This is collected through a third-party analytics service, which uses cookies and similar technologies.
• Logs: IP address, browser user agent, request details, and timestamps recorded by our servers and hosting providers to operate and secure the site and the Services.

Customer Data: the data you or your organization connect to or create in the Services. We process it to provide the Services, as described in our terms of service and your agreement with us.

• To provide, operate, maintain, and support the Services, including creating and managing accounts.
• To respond to your requests and prepare for conversations you ask to have with us.
• To process payments and manage billing.
• To understand how the site is used and improve it.
• To protect the security and integrity of the site and the Services, and to detect and prevent fraud and abuse.
• To send you information about the Services you asked for or that relates to your account. You can opt out of marketing emails at any time.
• To comply with legal obligations and enforce our terms.

Where the GDPR or similar laws apply, we rely on these legal bases: performing a contract with you or taking steps you request before one; our legitimate interests in running, securing, and improving our business, balanced against your rights; your consent, where we ask for it; and compliance with legal obligations.

The site uses a third-party analytics service to measure visits and how people use the site. It sets cookies and receives the analytics information described above on our behalf.

The site does not run advertising or retargeting tags, and we do not use analytics data to show you ads.

You can block or delete cookies in your browser settings. The site continues to work if you do.

We run the site and the Services on third-party providers that process data on our behalf for hosting and content delivery, sign-in, payments, and site analytics. They may use it only to provide their services to Orama.

We also share personal information:

• With service providers that help us operate the business, such as email, customer support, and productivity tools, under contracts that limit their use of it to serving Orama.
• When required by law, legal process, or a lawful request from public authorities, or when necessary to protect the rights, property, or safety of Orama, our customers, or others.
• In connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this policy.
• With your consent or at your direction.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Orama is based in the United States, and our providers may process data in the United States and other countries. Where the law requires it, we protect personal information transferred out of the European Economic Area, the United Kingdom, or Switzerland with appropriate safeguards, such as the European Commission’s standard contractual clauses.

We keep your data while your account is active. When you close your account or ask us to delete your data, it is deleted within 30 days.

We keep sales and contact requests for as long as we are in conversation with you and for a reasonable period afterwards, unless you ask us to delete them sooner. We keep information longer where the law requires it, such as billing records, or where it is needed to resolve disputes or enforce our agreements.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and access controls that limit who can reach it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have legal rights over your personal data — including access, correction, deletion, portability, and objection to certain processing (for example under the GDPR or the CCPA). Email [email protected] to exercise them; we respond to every verified request.

If you are in the European Economic Area or the United Kingdom, you may also lodge a complaint with your local data protection authority. If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to delete and correct it, and not to be discriminated against for exercising these rights. You may use an authorized agent, and we may ask you to verify your identity before acting on a request.

The site and the Services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy from time to time. We will post the updated version on this page and change the date at the top, and if a change is material, we will give more prominent notice.

Email [email protected] for any request about your data — access, correction, deletion, or a question this policy does not answer. A person reads every request.