Privacy Policy

Introduction

Oryn Systems LLC ("Oryn," "we," "us," or "our") is committed to protecting your privacy and maintaining the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and inventory management services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

1. Information We Collect

Information You Provide Directly

• Account Information: Name, email address, company name, phone number, and billing information when you create an account or subscribe to our Services.
• Inventory Data: Product information, quantities, locations, custom fields, and any other data you enter into our platform.
• Communications: Information you provide when you contact our support team, respond to surveys, or communicate with us.
• Payment Information: Credit card numbers and billing details (processed securely by our third-party payment processors).

Information Collected Automatically

• Usage Data: Information about how you interact with our Services, including features used, pages viewed, and actions taken.
• Device Information: Device type, operating system, browser type, unique device identifiers, and mobile network information.
• Log Data: IP address, access times, referring URLs, and system activity for security and performance monitoring.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience and analyze usage patterns.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain Services: To operate, maintain, and improve our inventory management platform.
• Account Management: To create, manage, and authenticate your account.
• Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance.
• Billing and Payments: To process payments, send invoices, and manage your subscription.
• Communications: To send service-related notifications, updates, security alerts, and administrative messages.
• Analytics and Improvements: To analyze usage patterns and improve our Services, features, and user experience.
• Security: To detect, prevent, and address fraud, unauthorized access, and other security issues.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. Information Sharing and Disclosure

We may share your information only in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our Services, such as:

• Cloud hosting providers (for data storage and processing)
• Payment processors (for billing and transactions)
• Email service providers (for transactional communications)
• Analytics providers (for usage analysis)

These providers are contractually obligated to protect your information and may only use it to perform services on our behalf.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies). We will notify you of such requests unless legally prohibited from doing so.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

4. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Access Controls: Strict role-based access controls limit who can access your data within our organization.
• Infrastructure Security: Our systems are hosted in SOC 2 Type II certified data centers with 24/7 monitoring.
• Regular Audits: We conduct regular security assessments, penetration testing, and vulnerability scans.
• Backup and Recovery: Data is backed up daily across multiple geographic regions with tested recovery procedures.
• Employee Training: All employees undergo security awareness training and are bound by confidentiality agreements.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Active Accounts: We retain your data for as long as your account is active.
• Closed Accounts: Upon account closure, we will delete or anonymize your personal data within 90 days, unless retention is required by law.
• Legal Requirements: We may retain certain information for up to 7 years for tax, legal, and regulatory compliance.
• Backup Data: Backup copies may persist for up to 30 days after deletion requests are processed.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information (subject to legal retention requirements).
• Portability: Request your data in a machine-readable format for transfer to another service.
• Opt-Out: Opt out of marketing communications and certain data processing activities.
• Withdraw Consent: Withdraw consent for data processing where consent was the legal basis.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may require verification of your identity before processing your request.

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. As stated, we do not sell personal information.

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the rights listed above. You also have the right to lodge a complaint with your local data protection authority.

7. Third-Party Services

Our Services may contain links to third-party websites, services, or integrations. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Third-party services we may integrate with include:

• Payment processors (Stripe, PayPal)
• Cloud storage providers
• Analytics services
• Customer support tools

8. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected]. If we discover that we have collected personal information from a child under 18, we will promptly delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data internationally, we implement appropriate safeguards to protect your information, including:

• Standard contractual clauses approved by relevant authorities
• Binding corporate rules where applicable
• Consent where required by law

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or a prominent notice on our website
• Obtain your consent if required by applicable law

We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection inquiries, you may also contact our Data Protection Officer at [email protected].

12. Disclaimer of Liability

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ORYN SYSTEMS LLC AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, AFFILIATES, SUCCESSORS, AND ASSIGNS SHALL NOT BE LIABLE FOR:

• Any indirect, incidental, special, consequential, punitive, or exemplary damages arising from your use of our Services
• Any loss of data, profits, revenue, business opportunities, or goodwill
• Any unauthorized access to, alteration of, or destruction of your data
• Any third-party conduct, products, or services
• Any damages resulting from circumstances beyond our reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, cyber attacks, or government actions

Indemnification

You agree to defend, indemnify, and hold harmless Oryn Systems LLC and its officers, directors, employees, agents, affiliates, successors, and assigns from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from:

• Your use of our Services
• Your violation of this Privacy Policy or any applicable laws
• Your violation of any third-party rights
• Any content you submit or transmit through our Services

Assumption of Risk

You acknowledge and agree that:

• No data transmission or storage system is completely secure
• You use our Services at your own risk
• You are responsible for maintaining the confidentiality of your account credentials
• You are responsible for all activities that occur under your account

Maximum Liability

IN NO EVENT SHALL OUR TOTAL LIABILITY TO YOU FOR ALL DAMAGES, LOSSES, AND CAUSES OF ACTION EXCEED THE AMOUNT PAID BY YOU, IF ANY, FOR ACCESSING OR USING OUR SERVICES DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO SUCH LIABILITY.

Severability

If any provision of this Privacy Policy is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that this Privacy Policy shall otherwise remain in full force and effect and enforceable.

Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions. Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Delaware.