legal

Privacy Policy

last updated: August 12, 2026

This policy explains what data Oryn collects, why, and what your rights are. The short version: we collect the minimum needed to run the service, we never sell your data, and you can ask for export or deletion at any time.

1. Data we collect

Account data — your name (optional) and email address, collected through our authentication provider (Clerk) when you sign up, along with your subscription status.

Payment data — payments are processed entirely by Stripe. Your card number never touches Oryn's servers; we only receive a customer reference and the status of your subscription.

Usage data — basic technical logs (pages requested, timestamps, IP address, browser type) needed to operate, secure and debug the service.

2. What we use it for

To provide the service: authenticate you, verify your subscription and show you your research desk.

To operate billing: start, renew and cancel your subscription through Stripe.

To communicate with you about your account or important changes to the service.

To keep the service secure: detect abuse, rate-limit requests and investigate incidents.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Third-party processors

We rely on a small number of service providers to run Oryn: Clerk (authentication), Stripe (payments) and Vercel (hosting). Each processes only the data required for its role, under its own privacy and security commitments.

4. Cookies

Oryn uses essential cookies only: they keep you signed in and protect against request forgery. We do not use advertising or cross-site tracking cookies.

5. Retention

We keep your account data for as long as your account exists. Technical logs are kept for a limited time for security and debugging, then deleted. When your account is deleted, associated personal data is removed from our systems within 30 days, except where a legal obligation requires longer retention (for example, billing records).

6. Your rights

You can request a copy of your data (export), correction of inaccurate data, or deletion of your account and associated data at any time by contacting us at contact@oryn.news. We respond within 30 days.

Depending on where you live (including under Québec's Law 25 and the EU GDPR), you may have additional rights, such as the right to withdraw consent or lodge a complaint with your local privacy authority.

7. Children

Oryn is not directed at children and requires users to be at least 18 years old. We do not knowingly collect data from minors.

8. Changes to this policy

If we make material changes to this policy, we will notify you by email or an in-product notice before they take effect. The “last updated” date at the top of this page always reflects the current version.

Questions about this page? Contact us at contact@oryn.news.