Privacy Policy

Orison Tech Pty. Ltd. ("Company", "we", "us", or "our"), based in Australia, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website and analytics services (the "Service"). It also outlines your privacy rights and how you can exercise them, in compliance with Australia's Privacy Act 1988 (including the Australian Privacy Principles, APPs). We also align our practices with internationally recognized data protection standards (such as principles reflected in the EU General Data Protection Regulation, GDPR) to ensure a high level of privacy protection.

By using the Service, you agree to the collection and use of your information as described in this Privacy Policy. We may update this Policy from time to time (see the "Changes to this Privacy Policy" section below). If you do not agree with our policies, please do not use the Service.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for you to access our Service or parts of our Service.
• Company (referred to as "the Company", "We", "Us" or "Our") refers to Orison Tech Pty. Ltd.
• Personal Data means any information that relates to an identified or identifiable individual. It includes information that directly identifies you (e.g. your name or email) and information that can indirectly identify you when combined with other data.
• Service refers to the Orison Tech website and related services accessible at https://orison-tech.com/
• Service Provider means any third-party company or individual that processes data on behalf of the Company to help provide or improve the Service (for example, cloud hosting providers or analytics partners).
• Usage Data means data collected automatically when you use the Service, such as your device information or browsing activity.
• Third-Party Social Media Service refers to any external social network or platform (such as LinkedIn, Google, Facebook, X, etc.) that we allow you to use for logging into or interacting with our Service.
• You means the individual using the Service, or the company or legal entity on behalf of which such individual is using the Service (in which case "you" refers to that entity).

Interpretation: Words with initial capital letters have the meanings defined above. These definitions apply whether the terms appear in singular or plural form.

Data We Collect

We collect several types of information from and about users of our Service. In all cases, we only collect personal data that is relevant and necessary for the purposes described in this Policy.

1. Personal Data You Provide to Us

While using our Service, we may ask you to provide certain personally identifiable information. This information is provided directly by you, for example, when you register for an account, contact us, or use interactive features. Personal Data we collect may include, for example:

• Identity and Contact Information: such as your name, email address, phone number, company/organization, and login credentials.
• Account Information: any information you provide as part of your account profile or preferences.
• Communications: records of correspondence and inquiries you send to us (e.g. support requests, feedback).

We do not actively collect any sensitive personal information (such as details of race, ethnicity, religious beliefs, health, financial information, or sexual orientation) unless you choose to provide it. We ask that you do not submit sensitive personal data to us unless it is necessary. If we ever need to process sensitive data, we will do so only with your explicit consent or as otherwise required by law.

2. Information We Collect Automatically (Usage Data)

When you use or access our Service, we automatically collect certain Usage Data about your visit. This data helps us understand how the Service is being used and improve it. Usage Data may include:

• Technical Information: Your device's Internet Protocol (IP) address, browser type, browser version, device type (e.g. PC or smartphone), operating system, and device identifiers.
• Usage Details: The pages or screens you view on our Service, the dates/times of your visits, the amount of time spent on each page, navigation paths, and other actions you take (such as clicks, scrolls, and mouse movements).
• Mobile Device Data: If you access the Service via a mobile device, we may collect additional information like your device's unique ID, mobile network, and the type of mobile internet browser.

This Usage Data is collected through automated technologies (described in the Cookies and Tracking Technologies section below) and helps us diagnose problems, administer the Service, and otherwise analyze user experience. Although Usage Data itself does not directly identify you, it may be linked with other Personal Data you provide, in which case we treat it as Personal Data.

3. Information from Third-Party Social Media Services

The Company may allow you to register or log in to your Account through third-party social media services (for example, signing in with LinkedIn, Google, Facebook, X, or Instagram). If you choose to connect via a Third-Party Social Media Service, we may receive certain profile information from that service, such as:

• Your username or handle and profile name
• Your email address associated with the account
• In some cases, your profile picture or public profile information
• Any other information you authorize the Third-Party service to share with us (for example, contacts or friend lists, if you explicitly consent to that)

We will only collect and use the information from your linked social media account in accordance with this Privacy Policy. Linking a social account is entirely optional. If you do so, you are granting us permission to obtain the information that you make available on that service and to use it for account creation, authentication, and any other purpose you authorize (such as social features within our platform). We do not post on your behalf or contact your contacts without your consent.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect Usage Data and improve your experience on our Website. A cookie is a small text file placed on your device that helps websites remember your preferences and activity. Web beacons, tags, and scripts are other technologies that help us gather usage statistics and understand how users interact with our Service.

How we use cookies:

• Necessary Cookies: These cookies are essential for the Service to function. They enable core features such as user authentication and account login security. Without these cookies, certain services or features (like staying logged in or adding items to a cart) cannot be provided. We use necessary session cookies to remember your login status and prevent fraudulent use of accounts.
• Preference/Functionality Cookies: These persistent cookies remember choices you make (such as your language or other preferences) to provide a more personalized experience. They may, for example, save your login details or interface customizations so you don't have to re-enter them each time.
• Analytics Cookies: We or our service providers may use cookies (or similar tools like web beacons) to collect information about how users navigate and use the Service. This data helps us identify areas for improvement, diagnose technical issues, and evaluate the effectiveness of our content and features.

You have control over cookies. Most web browsers allow you to refuse or delete cookies via settings. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, please note that if you disable or reject cookies, some parts of the Service may become inaccessible or not function properly (for example, you might not be able to log in or use certain interactive features). For more details, see our separate Cookies Policy or adjust your browser settings. By default, unless you have disabled cookies, our system will issue cookies when you direct your browser to our Website.

How We Use Your Personal Data

We only use your personal data for lawful purposes and as outlined in this Policy. The purposes for which Orison Tech uses personal information include:

• To Provide and Maintain Our Service: We use your information to create and manage your user Account, allow you to log in, and provide you with the features and services you request. This includes using Personal Data to operate the technical aspects of the platform, host your data securely, and monitor usage of the Service. (Legal basis: Performance of a contract with you. We need to process your data to deliver the services you signed up for.)
• To Personalize and Improve the Service: We analyze usage trends and user behavior to improve the functionality, security, and user experience of our platform. This helps us fix bugs, optimize performance, and develop new features. We may also use data analysis to understand what features are most useful to users. (Legal basis: Legitimate interests. We have a legitimate interest in improving our services and ensuring they are effective and secure, in a way that does not override your rights.)
• To Communicate with You: We may use your contact information (email address, phone number) to send service-related communications. This includes responding to your inquiries or support requests, sending confirmations and technical notices, updates on security or privacy matters, and administrative messages about your Account or transactions. We will also contact you to provide important information about changes to our Service or policies. (Legal basis: Performance of contract or legitimate interests. Such communications are necessary to perform our services and keep you informed of important issues. In some cases, communications may be required by law, such as notifying you of a data breach.)
• For Marketing and Newsletters (with Consent): With your permission, we may use your email or contact details to send you newsletters, offers, or promotions about our products and services that are similar to those you have already used or inquired about. We will only send you marketing communications if you have opted in to receive them, or if you are an existing client and applicable law allows us to send you certain types of marketing (subject to your right to opt out). You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in the message or by contacting us directly. (Legal basis: Consent. You have the right to withdraw your consent at any time, and we will not send you promotional materials if you opt out.)

We will not sell your personal information to third parties. We will only process your data in ways that are fair, lawful, and transparent to you. If we rely on your consent for a particular use of your data, you have the right to withdraw that consent at any time (this will not affect the lawfulness of any processing we already performed based on your consent before its withdrawal).

Data Security and Breach Notification

Data Security: We have implemented appropriate technical and organizational measures to safeguard your personal data against loss, theft, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include, for example:

• Encryption of data in transit (using HTTPS/TLS) and at rest where applicable, to prevent eavesdropping or unauthorized reading of data.
• Access controls to restrict personal data to authorized personnel only. Our staff access to personal information is limited by role and subject to strict confidentiality obligations.
• Secure infrastructure on reputable cloud services (our Service is hosted on Google Cloud Platform in Australia, which employs robust security practices and certifications). We utilize firewalls, network security monitoring, and vulnerability management to protect our systems.
• Regular data backups and secure storage to ensure integrity and availability of your information.
• Periodic training for our employees on privacy and data protection best practices, to ensure they handle your data with care.
• Policies and procedures for responding to and managing any security incidents that may occur.

While we strive to protect your data, please note that no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of information. However, we continuously review and enhance our security practices to mitigate new threats as they arise. You also play an important role in keeping your information secure: please choose a strong password for your account, do not share your login credentials, and notify us immediately if you suspect any unauthorized access to your account.

Your Privacy Rights

We respect your rights to control your personal information. Subject to applicable law (such as the APPs and PDPA), you have several important privacy rights, including:

• Right to Access: You have the right to request confirmation of whether we hold personal data about you, and to obtain a copy of that information, including details about how we use and share it.
• Right to Correction (Rectification): We strive to keep your personal data accurate and up to date. If you believe that any information we hold about you is incorrect, incomplete, or outdated, you have the right to request that we correct or update it.
• Right to Deletion (Erasure): You have the right to request the deletion of your personal data that we hold, in certain circumstances. This is sometimes called the "right to be forgotten."
• Right to Withdraw Consent: Where we rely on your consent for any processing of personal data (for example, for sending marketing emails or processing sensitive data), you have the right to withdraw that consent at any time.
• Right to Object to Processing: In certain situations, you have the right to object to the processing of your personal data.
• Right to Data Portability: To the extent required by law, you may request a copy of certain personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Complain: We take your privacy concerns seriously. If you believe we have violated your privacy rights or have any complaints about how we handle your personal data, you have the right to complain to us and/or to the relevant data protection authority.

Children's Privacy

Our Service is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18 without appropriate consent. If you are under 18 (or the age of majority in your jurisdiction), please do not use the Service or provide any personal data to us unless you have your parent or guardian's permission.

If you are a parent or guardian and you learn that your child under 18 has provided us with personal information without your consent, please contact us. If we discover that we have inadvertently collected personal data from a child without the necessary consent or authorization, we will take prompt steps to delete that information from our servers.

Changes to this Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will post the updated Privacy Policy on this page and update the "Last updated" date at the top. If the changes are significant, we will provide a more prominent notice (such as a notification on our website or an email to registered users) before the changes take effect, as required by applicable law.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes to this Policy constitutes your acceptance of the updated terms (to the extent permitted by law). If you do not agree with the changes, you should stop using the Service and contact us if you wish to remove your data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us. We are here to help and will respond as promptly as possible.