Privacy Policy

This Privacy Policy describes how LUMORA AI PTE. LTD., a company incorporated in Singapore and operating under the product name Orahub ("Orahub", "we", "us", or "our"), collects, uses, discloses, stores, transfers, and otherwise processes personal information in connection with the Orahub website, Orahub account registration, subscription and billing administration, customer support, and related communications (collectively, the "Service"). For purposes of applicable data protection law, LUMORA AI PTE. LTD. is the controller of the personal information described in this Privacy Policy, except where this Privacy Policy expressly states that a third party controls the relevant processing. By accessing or using the Service, you acknowledge that your personal information will be handled as described in this Privacy Policy. 1. Scope and Service Boundary Orahub operates an independent website that distributes and makes available skills and related access information. Orahub does not, through its website, ordinarily receive, host, or store the images, prompts, editing instructions, output files, or other content that users may submit to third-party tools, APIs, models, platforms, or editing services when using an Orahub-distributed skill. If you use an Orahub-distributed skill with a third-party service, any personal information or other content submitted in that third-party environment is governed by the applicable third party's terms, privacy notice, and data handling practices, unless Orahub expressly states otherwise for a specific feature. This Privacy Policy applies only to personal information processed by Orahub in connection with: - the Orahub website; - account registration and account administration; - subscriptions, billing status, and related support; - customer service, service notices, and security interactions; and - cookies and similar technologies used on the Orahub website. 2. Personal Information We Collect The only information we require you to provide directly in order to register for Orahub is your email address. We may also process limited account, transactional, technical, and support-related information as described below. A. Registration and Account Information We collect: - email address; - internal account identifier; - records relating to account creation, verification, access, modification, suspension, and closure. B. Subscription and Transaction Information Payments are processed by third-party payment partners. Orahub does not store full payment card numbers. In connection with a purchase or subscription, Orahub may receive limited information from the payment provider, including: - transaction identifier; - billing or payment status; - subscription status; - renewal, expiration, or cancellation status; and - limited anti-fraud, chargeback, or payment risk information. C. Technical and Usage Information When you access or use the Orahub website, we may automatically collect: - IP address; - browser type, device type, operating system, and language settings; - referral URLs and timestamps; - security logs, diagnostic records, and error reports; and - basic website usage information, such as page visits and feature interactions. D. Communications Information If you contact Orahub, we may collect: - your email address; - the content of your communications; and - records relating to support requests and related correspondence. E. Cookies and Similar Technologies We and our service providers may collect information through cookies, pixels, local storage, log files, and similar technologies. Further details are set out in the Orahub Cookie Policy. F. Information Orahub Does Not Intentionally Collect Through Its Website Unless Orahub expressly states otherwise for a specific feature, Orahub does not intentionally collect or store user images, prompts, editing instructions, generated results, or output files through the Orahub website. 3. Purposes of Processing Orahub may process personal information for the following purposes: - to create, verify, maintain, and administer your account; - to provide access to the Service and make Orahub-distributed skills and related information available to you; - to administer subscriptions, confirm payment status, prevent payment fraud, and manage billing-related support; - to communicate with you regarding your account, transactions, support requests, service updates, and security notices; - to operate, maintain, secure, troubleshoot, and improve the Service; - to monitor usage, performance, reliability, and website functionality; - to send product updates, newsletters, or promotional communications where permitted by law or based on consent; - to comply with legal obligations, enforce contractual rights, and protect the rights, property, safety, and security of Orahub, its users, and others; and - to create aggregated or de-identified information for analytics, internal reporting, and service improvement. 4. Legal Bases for Processing If you are located in the European Economic Area ("EEA"), Switzerland, or another jurisdiction that requires a legal basis for processing, Orahub processes personal information on one or more of the following legal bases: - Contract. Processing is necessary to provide the Service requested by you, including account registration, account administration, subscription support, and related communications. - Legitimate Interests. Processing is necessary for the legitimate interests of Orahub or a third party, including operating, securing, improving, and supporting the Service, preventing fraud and abuse, and managing ordinary business operations, provided those interests are not overridden by your fundamental rights and freedoms. - Consent. Processing is based on your consent where consent is required, including for certain cookies, marketing communications, or other optional processing activities. - Legal Obligation. Processing is necessary to comply with applicable law, regulation, lawful request, accounting requirement, or enforcement obligation. 5. Disclosure of Personal Information Orahub may disclose personal information to the following categories of recipients: A. Service Providers and Processors Orahub engages service providers that support operation of the Service, including providers for: - cloud hosting and storage; - infrastructure, website operation, and security; - fraud prevention; - customer communications and email delivery; - analytics and website performance measurement; and - payment processing and billing support. B. Third-Party Platforms and Payment Providers If you access Orahub through a third-party platform, marketplace, or integration, or if you complete a purchase through a third-party payment page, that third party may collect and process information under its own terms and privacy practices. Orahub may receive limited account, status, subscription, or transaction information from such third parties where reasonably necessary to provide the Service. C. Legal and Protective Disclosures Orahub may disclose personal information where disclosure is reasonably necessary to: - comply with applicable law, regulation, legal process, or lawful governmental request; - enforce the Orahub Terms of Use or other applicable agreements; - detect, investigate, prevent, or respond to fraud, security incidents, abuse, or unlawful activity; or - protect the rights, property, safety, or security of Orahub, its users, or others. D. Corporate Transactions Personal information may be disclosed in connection with a merger, acquisition, financing, reorganization, sale of assets, or other corporate transaction, subject to applicable confidentiality and legal protections. 6. International Transfers Orahub operates through service providers and infrastructure that may be located in multiple jurisdictions. - Personal information processed by Orahub is stored in the United States using AWS infrastructure. - Personal information may also be processed in the United States and in other countries where Orahub or its service providers operate. - Those jurisdictions may not provide the same level of data protection as your country or region of residence. Where required by applicable law, Orahub implements appropriate safeguards for international transfers, including contractual, organizational, and technical measures. For personal information transferred from the EEA to countries outside the EEA, Orahub may rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism. Additional Information for Users in Japan If you are located in Japan, Orahub may transfer personal data to service providers outside Japan, including in the United States, in connection with hosting, security, payment processing, communications, and service delivery. Where required by the Act on the Protection of Personal Information ("APPI"), Orahub will provide information concerning overseas transfers and applicable safeguards and will implement measures required to ensure appropriate handling. Additional Information for Users in Korea If you are located in Korea, your personal information may be processed or entrusted overseas in connection with hosting, account administration, communications, payment processing, website security, and website operation. This may include: - destination country: United States and other countries relevant to Orahub service providers; - items transferred: email address, internal account identifiers, device and usage logs, support communications, and limited payment-related records as applicable; - timing and method: transmission through secure networks when you sign up, log in, contact Orahub, make a purchase, or otherwise use the Service; - purpose: operation of the Service, data storage, subscription confirmation, payment administration, security, and support; and - retention period: only for so long as necessary for the stated purposes or as required by applicable law. Requests for additional information concerning current overseas processing arrangements may be directed to privacy@orahub.ai. 7. Cookies and Similar Technologies Orahub uses cookies and similar technologies to operate the website, remember preferences, understand website usage, improve performance, and, where enabled, support analytics. Where required by applicable law, Orahub will obtain consent before placing non-essential cookies. Further details are available in the Orahub Cookie Policy. 8. Data Retention Orahub retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including: - for the duration of your active account; - for a limited period after account closure to comply with legal, accounting, audit, dispute-resolution, fraud-prevention, backup, or enforcement requirements; and - for limited operational periods necessary to maintain security, troubleshoot issues, and administer subscriptions or support requests. When personal information is no longer required, Orahub will delete, anonymize, or securely isolate the information, unless continued retention is required or permitted by applicable law. 9. Data Security Orahub maintains reasonable technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, or disclosure. However, no method of transmission over the internet and no method of electronic storage is fully secure, and Orahub cannot guarantee absolute security. 10. Privacy Rights Depending on your jurisdiction of residence, you may have rights in relation to your personal information, subject to applicable legal limitations and verification requirements. Those rights may include the right to: - access, know, or obtain a copy of personal information held about you; - request correction of inaccurate personal information; - request deletion of personal information; - request restriction of processing; - object to certain processing; - withdraw consent where processing is based on consent; - request portability of personal information, where applicable; - request information concerning disclosures or international transfers; and - lodge a complaint with a competent supervisory or regulatory authority. EEA and Similar Jurisdictions If you are located in the EEA or Switzerland, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, and you may lodge a complaint with your local data protection authority. California and Certain Other U.S. States Depending on applicable U.S. state privacy law, you may have rights to know, access, delete, correct, or obtain a portable copy of certain personal information. You may also have rights to opt out of "sale," "sharing," targeted advertising, certain profiling, or certain uses of sensitive personal information, if applicable law applies and if Orahub engages in those activities. Orahub does not sell personal information for monetary consideration. If Orahub engages in conduct that triggers a statutory opt-out right under applicable U.S. privacy law, Orahub will provide the required notice and method for exercising that right. Japan If you are located in Japan, and to the extent required by APPI, you may request disclosure, correction, addition, deletion, suspension of use, or suspension of third-party provision of retained personal data, subject to applicable exceptions. Korea If you are located in Korea, you may have rights to access, correct, delete, or request suspension of processing of your personal information, subject to applicable law. How to Exercise Your Rights To exercise available privacy rights, please contact privacy@orahub.ai. Orahub may request information reasonably necessary to verify identity and process the request. Where required by applicable law, Orahub will also provide a means to appeal a request decision. 11. Marketing Communications Orahub may send service-related communications that are necessary for operation of the Service. Orahub may also send promotional communications where permitted by law or based on consent. You may opt out of promotional communications at any time by using the unsubscribe mechanism included in the communication or by contacting privacy@orahub.ai. 12. Children The Service is not directed to children, and Orahub does not knowingly collect personal information from children in violation of applicable law. If Orahub becomes aware that personal information has been collected from a child in violation of applicable law, Orahub will take appropriate steps to delete the information or otherwise comply with applicable law. 13. Third-Party Services The Service may contain links to or integrations with third-party websites, marketplaces, payment providers, platforms, or services. Orahub is not responsible for the privacy, security, or data handling practices of such third parties. Users should review the applicable third-party terms and privacy notices before providing information in those environments. 14. Changes to This Privacy Policy Orahub may amend this Privacy Policy from time to time. The updated version will be posted on the website and will indicate the revised "Last Updated" date. Where required by applicable law, Orahub will provide additional notice or obtain consent. 15. Contact Information Questions, requests, or complaints relating to this Privacy Policy or Orahub's privacy practices may be directed to: privacy@orahub.ai