Draft for review. This is a plain-language draft, not legal advice. Items in [brackets] still need to be filled in before launch.
Privacy Policy
This explains what Oriloop collects, why, and what you can do about it. Oriloop is run by [legal entity name, country]. Contact: [contact email].
What we collect
- Account: your email address, and your name and profile picture if you sign in with Google.
- Sign-in: session records with IP address and browser type, kept to keep you signed in and to stop abuse.
- Your images: the files you upload, and the layers, drafts and videos we make from them.
- Payments: handled by [merchant of record]. We see what you bought, never your full card details.
How we use it
- To run the service: sign you in, process your images and show you the results.
- To protect it: bot checks (Cloudflare Turnstile), rate limits and abuse prevention.
- To email you about your account. No marketing email without your consent.
AI processing of your uploads
Your images are processed automatically by AI models to read the text, separate the layers and plan the motion. The models run on our own accounts with our providers. We don't sell your images, and we don't use them to train AI models. [Confirm this before launch.]
Who processes data for us
- Cloudflare: hosting, database, file storage, email and bot checks.
- Modal: GPU processing of images.
- Google: only if you choose Google sign-in.
- [Merchant of record]: payments and tax.
These providers may process data outside your country under their own data-protection terms.
How long we keep it
- Uploaded images, layers and drafts: deleted automatically after 30 days.
- Final videos and your account details: while your account is active.
- When you delete your account, we delete your account record, sessions and all your files straight away. Payment records are kept as tax law requires.
Your choices and rights
- Delete any upload at any time on My flyers, or your whole account on the Account page.
- Ask us for a copy of your data, or for a correction or deletion, at [contact email]. We reply within 30 days.
- Depending on where you live, you may also complain to your data-protection authority.
Cookies
We use only the cookies needed to keep you signed in, plus Cloudflare Turnstile's bot check. No advertising or tracking cookies.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the app first.