Privacy Policy
Last updated: May 28, 2026
1. Who we are
ORA ("we", "us") is a personal AI concierge that operates over WhatsApp. This policy explains what we collect, why, and the choices you have. Questions? Email admin@useora.app.
2. What we collect
- Account data: your WhatsApp phone number and display name.
- Conversations: messages, voice notes, images, and files you send to ORA, plus our replies.
- Memory: facts, preferences, reminders, and contacts you ask ORA to remember.
- Connected services: tokens and metadata for third parties you link (e.g. Gmail, calendar).
- Usage data: message counts, feature usage, error logs, and device/locale info.
- Billing: if you subscribe to Premium, our payment processor handles card data; we store only subscription status.
3. How we use it
- To answer you, perform tasks you ask for, and remember context across chats.
- To run AI models that draft, summarize, translate, transcribe, and search on your behalf.
- To operate, secure, and improve the service (debugging, abuse prevention, analytics).
- To send service notices, and — only with consent — product updates.
We do not sell your personal data. We do not use your private messages to train public AI models.
4. Sub-processors
ORA relies on trusted providers to deliver the service, including WhatsApp/Meta (message transport), cloud hosting and database providers, AI model providers, transcription and voice services, email delivery, and payment processing. These vendors process data only under contract and only as needed to provide their function.
5. Retention
Conversations and memory are kept for as long as your account is active so ORA can stay useful. You can ask ORA to forget specific items at any time, or delete your account to remove everything. Backups are purged within 30 days.
6. Your rights
Depending on where you live (GDPR, UK GDPR, CCPA, POPIA, and similar), you may request access, correction, export, or deletion of your data, and object to certain processing. Email admin@useora.app and we will respond within 30 days.
7. Security
Data is encrypted in transit and at rest. Access is restricted to staff who need it. No system is perfect — if we ever experience a breach affecting you, we will notify you promptly as required by law.
8. Children
ORA is not intended for users under 16. We do not knowingly collect data from children.
9. International transfers
Your data may be processed in countries other than your own. Where required, we use Standard Contractual Clauses or equivalent safeguards.
10. Changes
We will update this policy as the product evolves. Material changes will be announced over WhatsApp or email before they take effect.