Orlanly Privacy Policy

1. What we collect

• At sign-up: name, email, password (stored only in hashed form by our authentication provider) and the profession you choose.
• To run your subscription: trial and paid access dates, payment records (date, amount, period), last sign-in time and a device identifier.
• Device identifier — a short hash that reveals nothing about your computer. It protects the free trial from abuse.

2. What stays on your computer

• Orders found, your replies, client answers, settings, AI keys and your Telegram and Reddit sign-ins are stored only on your device and are never sent to us.
• We do not read your Telegram or Reddit messages.

3. Third parties

• Account and database provider (Supabase) — stores the data from section 1. Storage location: Supabase, Ireland (EU), region eu-west-1.
• Email service — sends confirmation codes.
• Google (Gemini) — only if you add your own key: the text of orders and client replies is sent to Google to draft your replies. The key is yours and you are responsible for its use. Connecting AI is optional.
• Telegram and Reddit — the app shows public posts from these platforms and sends messages through your own signed-in session, only when you press a button.
• We do not sell your data or use it for advertising. We do not send marketing emails.

4. Cookies and analytics

The app uses no tracking cookies, trackers or advertising SDKs.

5. How long we keep data

• Account data — while the account exists. It is deleted when you delete the account.
• Payment records are kept in anonymised form for as long as accounting and tax law requires.

6. Your rights

• See and correct your data — in «Profile» or by contacting us.
• Withdraw consent and delete your account and data — the «Delete account» button in your profile, or a request to the contacts above. We complete it within 10 business days.
• Complain to your data protection authority if you believe we broke the law.

7. Age

The service is for people 18 and older. We do not knowingly collect data from children.

8. Security

Database access rules let each user see only their own data. No service can guarantee absolute protection — keep your password secret.