Privacy Policy

1. Introduction & Scope

Welcome to OrionHQ, a platform owned and operated by Yoga Products Top Limited ("we", "us", or "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, process, share, and protect your information when you use our SaaS application, marketing platform, and related services (collectively, the "Platform").

2. Tracking Technologies & Integrations

To provide our advanced features, we integrate with third-party service providers. Consent-based gating is applied before any tracking pixels or client scripts are loaded:

• Google Tag Manager (GTM) Client & Server: Client-side events are routed to our GTM Client container, which coordinates server-side routing to GTM Server, and subsequently to Google Analytics. No direct GA4 tracking occurs from the browser.
• Google Analytics 4 (GA4): Monitors session data, active profiles, and usage telemetry.
• Google Search Console: Used to optimize search indexes and monitor search performance.
• Firebase: Serves as our primary database (Cloud Firestore), authentication module (Firebase Auth), and storage repository.
• Stripe: Processes payment credentials, subscriptions, invoices, and billing histories securely.
• Google reCAPTCHA Enterprise: Used to protect critical platform actions (logins, registrations, password resets, workspace creation, team invitations, billing checkouts, and API key generation) against automated spam, credential stuffing, and bot attacks. reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis. The processing of this information is subject to Google's Privacy Policy and Terms of Service.

3. Artificial Intelligence (AI) Integrations

OrionHQ integrates with OpenAI APIs to power our AI Studio, AI Writer, and Workflow engines. When you run AI workflows or generate content, relevant texts are securely processed. We do not use your proprietary brand content or generated copy to train AI models.

4. Your Rights (GDPR & CCPA)

Under GDPR, UK-GDPR, and CCPA, you have specific rights regarding your personal data:

• Right of Access: Request a comprehensive export of all your data (JSON format).
• Right to Rectification: Request correction of inaccurate profile data.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your account.
• Right to Withdraw Consent: Update your cookie preferences at any time to reject tracking.

5. Data Retention & Deletion Process

We retain your data for as long as necessary to provide SaaS services. You can trigger a data deletion request self-service. Once requested, the system creates a pending request. After admin verification, we compile exports, purge live collections, and log an immutable audit log entry of the erasure.

6. Contact Information

For privacy inquiries, please contact our Data Protection Officer at:support@orionhq.space.