Orato Privacy Policy

Last updated: March 29, 2026

This Privacy Policy explains how Orato collects, uses, stores, and shares information when you use the Orato mobile application, websites, APIs, and related services (collectively, the "Services").

1. Information We Collect

• Account information such as your email address, name, and authentication details.
• Content you submit through the Services, including audio files, transcripts, prompts, notes, and support messages.
• Payment and subscription information provided through third-party payment processors or app stores.
• Technical information such as device type, operating system, app version, IP address, and diagnostic logs.
• Usage information, including how you interact with the Services and which features you use.

2. How We Use Information

We use information to:

• provide, maintain, and improve the Services;
• authenticate users and secure accounts;
• process transcripts, summaries, AI features, and other requested functionality;
• manage subscriptions, billing, and customer support;
• monitor performance, fix bugs, and prevent fraud, abuse, or misuse;
• comply with legal obligations and enforce our terms.

3. AI and Service Providers

We may use third-party providers, including AI and cloud infrastructure providers, to operate the Services. Your content may be processed by these providers only as needed to deliver the Services on our behalf and subject to applicable contractual or legal safeguards.

4. Legal Bases and Sharing

Depending on your location, we may process personal information based on contractual necessity, legitimate interests, consent, or legal obligations. We may share information:

• with vendors and service providers that support the Services;
• with payment processors and app marketplace operators for purchases and subscription management;
• when required by law, regulation, legal process, or governmental request;
• to protect the rights, safety, and security of Orato, our users, or others;
• in connection with a merger, acquisition, financing, or asset sale.

5. Data Retention

We retain information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and maintain legitimate business records. Retention periods may vary depending on the type of data and the purpose for which it was collected.

6. Your Choices and Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, export, or restrict the use of your personal information. You may also be able to object to certain processing or withdraw consent where processing is based on consent. You can contact us to submit a request.

7. Security

We use reasonable administrative, technical, and organizational measures to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Transfers

Your information may be processed or stored in countries other than your own. Where required, we take steps intended to provide appropriate safeguards for cross-border data transfers.

9. Children's Privacy

The Services are not directed to children under the age required by applicable law to consent to data processing without parental involvement. We do not knowingly collect personal information from children in violation of applicable law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version and revise the "Last updated" date.

11. Contact

If you have questions about this Privacy Policy or privacy requests, contact:

Elham Labs
Email: service@elhamlabs.com