Privacy Notice

1. What personal data we collect

• Account data: name, email address, password hash and any profile information you provide.
• Business data: company name, industry, products, unique selling points and other inputs you enter to generate campaigns.
• Usage and telemetry: feature usage, generated outputs, campaign activity and diagnostic logs.
• Device and network data: IP address, browser type, operating system and approximate location derived from your IP for fraud prevention and localised pricing.
• Support data: messages, tickets and feedback you send us.

2. How we use your data

• Provide the service: create your account, generate personas, brand voice, messaging and creative outputs.
• Authentication and security: verify your identity, protect accounts and detect fraud.
• Billing and subscriptions: process payments, manage your plan and handle tax compliance.
• Product improvement: understand how Orion is used and fix issues.
• Customer support: respond to questions and resolve problems.
• Marketing: send product updates and tips you can opt out of at any time.

3. Legal basis for processing

We process personal data on the basis of contract performance (providing Orion to you), legitimate interests (security, fraud prevention and product improvement), legal obligation (tax and regulatory compliance) and, where required, your consent (for optional marketing communications).

4. Who we share data with

• Service providers: hosting, analytics, error reporting, customer support and email delivery providers.
• Paddle.com: our Merchant of Record for all payments, subscription management, tax compliance and invoicing.
• Professional advisers: legal, accounting and compliance professionals when necessary.
• Authorities: regulators, courts or law enforcement when required by law.

5. International transfers

CGM Innovation is based in South Africa and serves customers globally. Your data may be processed in other countries. Where data leaves South Africa, the UK or the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your information.

6. Data retention

We keep your personal data for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymise it.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive a copy in a portable format. You may also withdraw consent at any time. We aim to respond to requests within one month.

To exercise your rights, contact us at privacy@orionmarketing.app.

8. Security

We use appropriate technical and organisational measures, including encryption in transit and at rest, access controls, regular monitoring and secure development practices, to protect your data.

9. Cookies and tracking

Orion uses essential cookies to keep you signed in and secure. We also use analytics cookies to understand how the platform is used. You can manage your preferences through your browser settings.

10. Children's privacy

Orion is not intended for children under 16. We do not knowingly collect personal data from children under 16.

11. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be available on this page with the updated date.

12. Contact us

For privacy questions or requests, email privacy@orionmarketing.app.