EightBlue - Privacy Policy

Ortomate Limited ("we", "us", or "our") operates the EightBlue application and website (the "Service"). This Privacy Policy explains how we collect, use, and share information about you when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

a. Information You Provide to Us:

• Account Information: When you create an account, we collect your name, email address, and password. We may also ask for your job title and role. If you register using Google Auth, we will collect your name, email address, and profile picture as permitted by your Google profile settings.
• Payment Information: We use Stripe for payment processing. We do not collect or store your full payment card details ourselves. Stripe handles this information on our behalf.
• Content: We collect the data and content you create, upload, or post to the Service ("Your Content").
• Communications: If you contact us directly, we may receive additional information about you, such as your name, email address, the contents of the message, and any other information you may choose to provide.

b. Information We Collect Automatically:

• Usage Data: We collect information about how you interact with our Service. This includes information such as your Internet Protocol (IP) address, browser type, operating system, and pages visited. We use Plausible Analytics for this purpose, which is a privacy-focused analytics tool.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service.
• Process your transactions and manage your subscription.
• Communicate with you, including responding to your comments and questions and providing customer support.
• Monitor and analyze trends, usage, and activities in connection with our Service.
• Personalize the Service and provide content and features that match your interests.
• For compliance purposes, including enforcing our Terms of Use or other legal rights.

3. How We Share Your Information

We do not sell your personal data. We may share your information with third-party service providers (sub-processors) who perform services on our behalf, as listed below:

• Infrastructure & Hosting: Vercel (Hosting), Supabase (Database), Upstash (Database Caching). These services host the application and store your data.
• AI Features: OpenAI and Anthropic. Some features of our Service rely on these providers. We send relevant data from Your Content to their APIs to enable this functionality. We do not use this data to train their models. We advise you not to submit sensitive personal information when using these features.
• Payment Processing: Stripe. They process your payment information on our behalf.
• Analytics: Plausible Analytics. They help us understand and analyze service usage.

We may also share information if required by law or if we believe in good faith that such action is necessary to comply with legal obligations, protect our rights, or prevent fraud.

4. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, or country where the data protection laws may differ. By using the Service, you consent to the transfer of your information to countries where our sub-processors operate, including the United States.

5. Data Security

We are committed to protecting your information. We implement technical and organizational measures designed to protect your information from unauthorized access, use, or disclosure. We are actively working towards achieving compliance with standards like SOC 2. However, no internet transmission is ever 100% secure, and we cannot guarantee its absolute security.

6. Your Data Rights

Depending on your location, you may have certain rights regarding your personal data under laws like the GDPR or CCPA. These rights may include:

• The right to access: You can request a copy of the personal data we hold about you.
• The right to rectification: You can request that we correct any inaccurate information.
• The right to erasure: You can request that we delete your personal data.
• The right to restrict processing: You can ask us to restrict the processing of your data.
• The right to data portability: You can request that we transfer your data to another organization.

To exercise any of these rights, please contact us at privacy@ortomate.ai.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us: