Privacy Policy

1. Who We Are

Oraklio ("we", "us", "our") operates the website oraklio.com and the application at app.oraklio.com. We are the data controller responsible for your personal data.

Contact: support@oraklio.com

2. What Data We Collect

We collect the following personal data when you use our Service:

• Email address — provided when you sign up via Google or directly
• Google account name and profile picture — if you register via Google OAuth
• Usage data — pages visited, features used, session duration (for improving the Service)
• Payment data — billing is handled by Stripe; we do not store card numbers. We receive subscription status and billing history.
• Log data — IP address, browser type, and timestamps (standard server logs)

3. How We Use Your Data

We use your personal data to:

• Provide and maintain the Service
• Authenticate your account and manage your subscription
• Send transactional emails (account activity, billing receipts)
• Improve our AI models and signal quality using aggregated, anonymized usage patterns
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data to train AI models in a personally identifiable way.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your data under the following legal bases:

• Contract performance — to provide the Service you signed up for
• Legitimate interests — to improve the Service and prevent fraud
• Legal obligation — where required by law
• Consent — for any optional communications (you may withdraw at any time)

5. Cookies

We use essential session cookies to keep you logged in and to protect against CSRF attacks. We do not use advertising or tracking cookies. Analytics, if used, are anonymized and do not fingerprint individual users.

6. Third-Party Services

We share data with the following processors solely to operate the Service:

• Stripe — payment processing (Stripe Privacy Policy)
• Google OAuth — authentication (Google Privacy Policy)
• Hosting infrastructure — server and database hosting; data is stored in the EU or EEA where possible

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., billing records for tax purposes, retained for up to 7 years).

8. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at support@oraklio.com. We will respond within 30 days.

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed credentials, and access controls. No transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notice. The updated policy will be effective upon posting.

12. Contact & Supervisory Authority

For privacy questions, contact us at support@oraklio.com. If you are in the EU and believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection authority.