Privacy Policy

1. Who we are

Work by Orif is operated by Orif AI, located at Tashkent region, Angren, Mustaqillik MFY, Axillik koʻchasi, 16-uy, Uzbekistan. For any privacy questions, contact us at info@orif.ai.

This policy applies to the Work by Orif web application and related services. By using the Service, you agree to the practices described here.

2. Information we collect

Account information

When you register, we collect your name, email address, and a securely hashed password. If you sign in with Google, we receive your email address, name, profile picture, and Google account identifier through Google OAuth.

Organization and workspace data

We collect data about the organizations you create or join, including organization name, members, roles, departments, and projects.

Content you create

We store content you add to the Service, such as tasks, daily reports, chat messages, and conversations with AI features.

Payment information

Paid plans are processed by Stripe. We do not store full payment card numbers. We retain information about your subscription, plan, seat count, and billing status.

Technical and usage data

We automatically collect log data, IP address, browser and device information, and cookies when you use the Service.

Analytics

We use Facebook Pixel (Meta) to understand how visitors interact with our marketing pages.

3. How we use your information

• To provide, operate, and maintain the Service;
• To power AI features such as automated summaries and chat;
• To process payments and manage subscriptions;
• To secure accounts and prevent abuse;
• To communicate with you about your account and the Service;
• To improve and develop the Service.

4. Legal bases for processing

Where data protection law such as the GDPR applies, we process personal data on these bases: your consent; performance of our contract with you; our legitimate interests in operating and improving the Service; and compliance with legal obligations.

5. AI processing

Content you provide — such as tasks, daily reports, and chat messages — may be processed by artificial-intelligence systems, including third-party AI providers, to generate summaries, suggestions, and chat responses. We do not use your private content to train third-party models without your consent.

6. Cookies and tracking technologies

We use cookies necessary for the Service to function, including an authentication cookie and a language-preference cookie. We also use the Facebook Pixel on our marketing pages for analytics. You can control cookies through your browser settings.

7. How we share your information

We do not sell your personal data. We share data only with service providers that help us operate the Service:

• Google — authentication via Google OAuth;
• Stripe — payment processing;
• Meta (Facebook) — analytics on our marketing pages;
• AI providers — to deliver AI features;
• Hosting and infrastructure providers — to run the Service.

We may also disclose data where required by law or to protect our rights, our users, and the public.

8. Data retention

We retain your personal data while your account is active or as needed to provide the Service. When you close your account or request deletion, we delete or anonymize your data unless we are required to retain it by law.

9. Data security

We apply reasonable technical and organizational measures to protect your data, including encrypted transport and hashed passwords. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International data transfers

Your data may be processed and stored in countries other than your own, including where our service providers operate. Where required, we take steps to ensure your data receives an adequate level of protection.

11. Your rights

Depending on your location, you may have the right to access, correct, delete, export, or restrict processing of your personal data, and to object to processing or withdraw consent. To exercise these rights, contact us at info@orif.ai. You may also have the right to lodge a complaint with your local data protection authority.

12. Google API Services and Limited Use

Work by Orif's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only the Google account information needed to let you sign in and identify your account, such as your email address, name, and profile picture. We do not use Google user data for advertising, and we do not sell it or share it except as necessary to provide the Service or as required by law.

13. Children's privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us so we can remove it.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and, where appropriate, notify you. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

15. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at info@orif.ai or by mail at Orif AI, Tashkent region, Angren, Mustaqillik MFY, Axillik koʻchasi, 16-uy, Uzbekistan.