Scope
This Privacy Policy explains how Oraclez (“we”, “us”, “our”) collects, uses, discloses, and protects information about you when you use our websites, products, and services (the “Service”). This Policy is designed to align with U.S. law, including California privacy rights under CCPA/CPRA. If additional jurisdictional disclosures apply, we will provide them.
- Controller. Oraclez acts as a “business” (controller) for the personal information it determines the purposes/means of processing.
- Scope of services. This Policy applies to our public site, app UI, and APIs. Enterprise agreements may include tailored privacy terms.
Information We Collect
We collect information directly from you, automatically when you use the Service, and from third parties. Categories may include:
- Identifiers (e.g., name, email, account ID, IP address).
- Internet/Network Activity (e.g., device/browser info, pages viewed, referring URLs, timestamps).
- Approximate Geolocation (derived from IP).
- Commercial Information (e.g., subscriptions, transactions) if paid features are used.
- Inferences drawn from the above to improve the Service.
- Content You Submit (e.g., URLs, feedback, reviews).
Examples of device data collected automatically: user agent string, OS version, language, error logs, session duration, and interaction events (clicks, scrolls) to help improve usability and security.
Sources of Personal Information
- You: forms, inputs, support requests.
- Automatic collection: cookies, SDKs, and similar technologies.
- Third parties: analytics providers, OSINT sources, and partners.
How We Use Information
- Provide, operate, and maintain the Service.
- Analyze usage to improve features, security, and performance.
- Detect, prevent, and investigate fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our Terms.
- Communicate with you (e.g., updates, support).
Personalization. We may customize certain experiences (e.g., language or theme) based on your settings or prior usage.
Aggregated data. We may aggregate/de‑identify data for analytics; aggregated data is not considered personal information.
How We Disclose Information
We may disclose information to: (a) service providers who process data on our behalf under contractual restrictions; (b) affiliates; (c) authorities where required by law; (d) parties to a business transfer; and (e) with your consent or at your direction.
- Service providers. Hosting, storage, analytics, security, support, and payment processing (if applicable).
- Legal compliance. Responding to subpoenas, court orders, or lawful requests by public authorities.
- Business transfers. In connection with mergers, acquisitions, or asset sales, subject to confidentiality.
Sales/Sharing of Personal Information
We do not “sell” personal information as defined by CCPA/CPRA and do not “share” personal information for cross‑context behavioral advertising. If our practices change, we will update this Policy and provide mechanisms to opt‑out (e.g., a “Do Not Sell or Share My Personal Information” link).
Cookies and Similar Technologies
We use cookies or similar technologies for essential operations, analytics, and security. You can adjust browser settings to limit or disable cookies; however, some features may not function properly. Where required, we will obtain consent and provide granular controls.
- Essential (e.g., session, CSRF protection, load balancing).
- Analytics (e.g., performance metrics, error diagnostics).
- Preferences (e.g., theme, language), where enabled.
Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the data type and use case.
Illustrative periods (subject to change): account metadata (life of account + reasonable period), security logs (90–365 days), transactional records (as required by law), support tickets (up to 2 years).
Security
We employ administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
- Controls. Access controls, encryption in transit, monitoring, and vulnerability management.
- Incidents. We investigate potential incidents and, where required, notify affected individuals and/or authorities.
Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
If we learn that we have collected personal information from a child under 13, we will delete the information as quickly as possible and take steps to prevent further collection.
California Privacy Rights (CCPA/CPRA)
California residents have the right to: (a) know the categories and specific pieces of personal information collected; (b) request deletion; (c) request correction; (d) opt‑out of sales/sharing (not currently applicable as described above); (e) limit use and disclosure of sensitive personal information (not currently processed for inferring characteristics). We will not discriminate against you for exercising your rights.
- Right to know/access. You may request the categories and specific pieces of personal information we collected about you.
- Right to delete/correct. Subject to exceptions, you may request deletion or correction of inaccurate information.
- Authorized agents. Agents may submit requests with proof of authorization and identity verification.
How to Exercise Rights: Submit a verifiable request to privacy [at] oraclez.example (placeholder). We may need to verify your identity and relationship to the request (e.g., via email verification or account login).
Do Not Track
Some browsers offer a “Do Not Track” signal. There is no consensus on how to respond; we currently do not respond to DNT signals. We will update this Policy if that changes.
Where legally required (e.g., Global Privacy Control in some jurisdictions), we will honor recognized signals as applicable.
International Transfers
If we transfer personal information outside your jurisdiction, we will use appropriate safeguards consistent with applicable law (e.g., contractual measures) to protect your information.
Depending on your location, these safeguards may include standard contractual clauses or comparable mechanisms.
Third‑Party Services
The Service may include links to or integrations with third‑party services (e.g., analytics, storage). Their privacy practices are governed by their own policies. We encourage you to review them.
Changes to This Policy
We may update this Policy from time to time. We will revise the “Last updated” date and, where required, provide additional notice.
Contact Us
For questions or requests, contact: privacy [at] oraclez.example (placeholder).