ori

Privacy Policy

Last updated: July 2026

1. Information We Collect

We collect the following information when you use Ori:

  • Account Information: Email address and payment information when you sign up
  • Chat Messages: Messages you send to and receive from the AI assistant
  • Usage Data: How you interact with the Service, including message counts and feature usage
  • Email Purchase History (only with your permission): If you explicitly grant access, we read your email to find your past purchases (such as order receipts) so we can learn your preferences and improve your shopping experience. This is optional and described in more detail below.

2. How We Use Your Information

We use your information to:

  • Provide and improve the Service
  • Review conversations with Ori to operate, debug, and improve the assistant, including the quality of its responses
  • Learn your preferences (including from email purchase history you choose to share) to personalize and improve your shopping experience
  • Process payments and manage subscriptions
  • Send important service updates and notifications
  • Respond to support requests
  • Detect and prevent abuse or fraud

We do not sell your data. We never sell, rent, or trade your personal information or your conversations, and we never use your data for third-party advertising.

3. Data Retention

We store your conversations with Ori — including the messages you send and receive — so the assistant has context within a conversation and so we can operate, debug, and improve the Service. We keep this conversation history until you ask us to delete it. We also retain de-identified and aggregated usage data for analytics. Account information is retained while your account is active and for a reasonable period afterward for legal and business purposes.

When you place an order, we share your shipping details with our fulfillment provider to complete it, and we clear the address from that individual order record once the order is placed. If you choose to save a default shipping address, we retain it so you don’t have to re-enter it on future orders; you can update or delete your saved address at any time. Any email access you grant for purchase-history import uses a short-lived, read-only token that is never stored.

You can request deletion of your data by contacting us at [email protected]

4. Data Sharing

We do not sell, rent, or trade your personal information — ever. We share data only with the providers needed to operate Ori, and only as needed:

  • Service Providers: Companies that help us operate the Service (payment processing, hosting)
  • AI Providers: Your messages are processed by AI model providers to generate responses. If you opt in to email purchase-history import, receipt content is processed only to extract your order details, by providers we configure so they may not retain it or train on it; the extracted purchase history then informs Ori’s responses like other conversation data. We never use your data to train AI models ourselves, and we use AI providers whose terms prohibit training their models on your data (see Section 5)
  • Fulfillment Providers: When you place an order, the details needed to fulfill and ship it (such as your shipping address) are shared with our fulfillment partner to complete that order
  • Legal Requirements: When required by law or to protect our rights

5. Email Purchase History (Optional)

Ori can offer to learn your taste faster by looking at your past purchases. This feature is entirely optional and only happens if you explicitly grant permission. For Gmail accounts, it uses the Google Gmail API with the read-only gmail.readonly permission:

  • Opt-in only: Nothing happens unless you choose to connect your email and approve access through your email provider’s consent screen (for Gmail, Google’s OAuth consent screen).
  • What we access: We use read-only access to search for and read purchase receipts and order confirmations — not the rest of your inbox.
  • What we keep: We store the order details extracted from those receipts (merchant, items, prices, dates, and order status), along with limited email metadata used to de-duplicate and trace each imported order — the email’s message ID and, for some receipts, its subject line and sender address. We do not store your email messages themselves. This imported purchase history is retained until you ask us to delete it (see Data Retention above).
  • No stored credentials: Access uses a short-lived token kept only in memory for the import. We never store your email password or token.
  • AI processing: To recognize orders, receipt emails are processed by AI model providers solely to extract your order details, and we configure those providers so they may not retain your data or use it to train their models. The extracted purchase history then helps Ori personalize your shopping, and is processed like your other conversation data (see Data Sharing above) — we never use it to train AI models, and our AI providers’ terms prohibit them from training on it.
  • For your experience only: We use this purchase history solely to provide and improve your shopping experience. We never sell it, never share it for advertising, and never use it to train generalized AI models.

Ori’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can decline this at any time, and declining does not affect your ability to use the rest of the Service. You can also revoke Ori’s access at any time from your Google Account’s security settings, and request deletion of imported purchase history at [email protected].

6. Security

We use industry-standard security measures to protect your data, including encryption in transit and at rest. However, no system is completely secure, and we cannot guarantee absolute security. Read more about how we protect your money and data on our security page.

7. Your Rights

Depending on your location, you may have rights to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Data portability

To exercise these rights, contact us at [email protected]

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service.

9. Contact Us

For questions about this Privacy Policy, contact us at [email protected]