Last updated: 13rd July 2023
Orli SAS ("Orli" or "us", "our", "we") is committed to respect and protect your right to privacy.
A Note on Legal Bases :
Certain jurisdictions do not allow the processing of personal data unless a legal basis has been established. Under the EU's General Data Protection Regulation (GDPR), the possible legal bases include:
Where you give your consent.
Where the processing is necessary to perform a contract with you.Where the processing is required to fulfill our legal obligations.Where we have a legitimate business interest in processing your data.
Where we are a controller, we only collect and process data where we have established a legal basis. Below you can find more details about specific legal basis.
Notice to California Residents:
If you are a resident of the State of California, some additional terms and rights may apply to you, as detailed below in the "California Privacy Notice".1. Types of Information We Collect.
1. Orli collects three types of personal data :
1.1 Data from persons who visit our Sites, including without limitation https://orli.ai/, https://app.orli.ai/, and any other site governed by this Privacy Notice ("Site Data"). The Site will record certain information automatically, such as your IP address, mobile device or computer, operating system and browser, and geo-location. In addition, we collect any information you provide when contacting us for any reason via our site interfaces, such as your name, email, address, and other contact information.
1.2 Data is collected when we process information in the context of providing services to our customers, including customers that use our Services free of charge (together "Customers"). It is the data concerning individuals, including Customer's personnel and service providers, collected when Customers, their personnel, or service providers use the Services ("Customer Data"). Customer Data includes data regarding how systems and code are used, accessed, developed, tested, and deployed by employees and service providers of our Customers using our Services. Additionally, this data includes names, emails, and account profiles on development systems such as project management tools, Git Providers, and messaging tools may be processed. To avoid doubt, Orli does not store the Customer's code while Orli processes the Customer's code. Our Processing of Customer Data on behalf of customers in the EU.
1.3 Data concerning individuals who access our Services through various means, including but not limited to browsers, mobile apps, and APIs ("Access Data"). Access Data can include information that is used for your identification or authentication into our various tools and services, such as names and email addresses, as well as profiles and account information from third-party services such as source code and project management tools, and metadata of a user's activity on such third party services.
You are not required by law to provide us with any of the information described herein, but by using the Services, you agree to provide us with such information.
2 . Specific Information We Collect :
2.1 Registration Data:
To access some of our Services, you may first need to create an account. You will be asked to provide information to verify your identity when creating an account. This information may include your name and email address, information from third-party providers through whom you access our Services and any other information we deem reasonably necessary to verify your identity adequately.
How We Use This Data:
We use your registration data to provide you access to our Services, save your preferences, improve the usability of our Services, protect the security of our Services, prevent fraud, and address any issues that arise. We use your contact details to communicate with you. We also use your contact details to send newsletters or promotional materials for our products and services. See the Our Communications section below for more information about our Communications and how you can control your preferences.
When we process your registration data to provide you with our Services, we do so based on performing a contract with you, in this case, our Terms of Service. When we process your registration data, we do so to maintain the Services, including to prevent fraud, protect the security of or address issues with the Services, and we do so based on our legitimate interest to maintain our assets. When we use your contact details to send you newsletters and promotional materials relating to our services, we do so based on your consent or our legitimate interest in marketing our products and services.
2.2 Contact Data:
If you contact us for any reason, we collect any Personal Data you provide, such as your email address and the content of your message. When you sign up for newsletters or email lists, we collect your name and email address. We may also collect additional information about the company you work for, including, without limitation, its name, email, and your role in the company.
If you apply for a job with us, we, or a third party operating on our behalf, collect the information you provide as part of your application and during the application process. This may include your full name, contact details, address, resume, recommendations, and any other information we may request or that you choose to share with us.
From time to time, we hold special events in which we may invite you to participate. If you register for an event, we will collect personal data provided as part of the registration process, such as your name, contact details, and any other information we may request.
If you have signed up for our newsletters or contacted us regarding our Services, we may send you newsletters or other promotional materials. We try to minimize direct marketing to a reasonable and proportionate level and only send you communications that we believe may interest you. If you opt-out of direct marketing, you will continue to receive administrative messages such as password reset, billing information, or support communication.
How we use this data: We use your Personal Data to respond to your inquiry, provide you with newsletters, and provide you with promotional or informational materials matching your interest in your sign-up request. Please choose to register for one of our special events. We will use the data you provided us for event planning and logistical purposes, to contact you with updates or to ask for your feedback regarding the event, to improve our events, products, and services, and for marketing purposes.
Legal Basis: Responding to your inquiry and providing newsletters where you have requested this is based on the performance of a contract with you. When we make use of your Personal Data to send promotional or informational materials, this is based on your consent to receive such promotional material. You may remove your consent at any point, including by emailing us at firstname.lastname@example.org or by following the "unsubscribe" link in any messages. If we need to contact you for topics as part of providing the services, we will contact you. Even if you withdraw your consent to receiving direct marketing, you will continue to receive these messages.
2.3 Automatically Collected Data:
When you use the Services, we automatically collect information about your computer or mobile device. This includes non-Personal Data such as your operating system and Personal Data such as your IP address, the location associated with your IP addresses, device ID, browsing history, and any information regarding your viewing or usage history of the Services. This data is collected through cookies and similar technologies. You can change your browser setting to manage which cookies are placed. For more information and how to adjust your preferences, please see the Cookies and Similar Technologies section below.
We may also use social plugins, such as the Facebook plugin, which will allow social media platforms to connect Personal Data collected through our Services with Personal Data in your social media profile. This combined data may be used to serve you with customized content or advertising on the applicable social media platform. We recommend you routinely review the privacy policies and preference settings that are available to you on any social media platforms.
We use this data to review how users use our Services, to develop new products or services and improve current content, products, and services, prevent fraud, protect the security of our Services, and address any problems with the Services. This data is often used in an aggregated and non-specific analytical manner. We also used this data in order to provide you with customized content and targeted offers related to our Services.
Developing, reviewing, and improving our products and services, as well as fraud prevention and security uses, is based on our legitimate interests in managing our business. Similarly, using this data to provide you with customized content relating to our Services is also based on our legitimate interests.
2.4 Statistical Information and Analytics:
We want to understand how people are using our Services so that we can make improvements, understand user needs, and tailor our services for users. To do this, we use specific third-party analytics tools that help us gather and compile statistical information. One of the third-party analytics tools we use is "Google Analytics". For more information about how Google collects information and how you can control such use at https://policies.google.com/technologies/partner-sites. We can also anonymize and aggregate data which we can then share with our business partners.
3. Sharing the Personal Data We Collect. We share your information, including Personal Data, as follows :
We share Personal Data with our subsidiary Orli SAS, where this is necessary to provide you with our products and Services and for the purpose of management of our business.
If you use our Services in connection with a company that is our Customer, that Customer may have access to information about your use of the Services.
3.3 Service Providers and Subcontractors:
We disclose information, including Personal Data we collect from and/or about you, to our trusted service providers and subcontractors, who have agreed to confidentiality restrictions and who use such information solely on our behalf in order to: (1) help us provide you with Services; and (2) to assist us in our direct marketing activities described above.
3.4 Business Transfers:
3.5 Law Enforcement Related Disclosure:
4. International Transfer :
5. Security :
We have implemented and maintain appropriate technical and organizational security measures, policies, and procedures designed to reduce the risk of accidental destruction or loss or the unauthorized disclosure or access to Personal Data appropriate to such data. We use measures such as physical, electronic, and procedural safeguards, access control, internal policies backups, and encryption to protect your data. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. You are responsible for protecting the devices you use and keeping your credentials protected.
6. Your Rights :
How to Access and Limit Our Use of Certain Personal Data. Depending on the applicable law, you may have some rights regarding the Personal Data that we collect about you. Certain additional rights may apply if you are in the EU, as detailed below.
6.1 Right of Access :
You have a right to know what Personal Data we collect about you. We may charge a fee for providing this information, subject to applicable law. If we cannot provide you with all the information you request, we will do our best to explain why.
6.2 Right to Correct Personal Data:
Subject to certain limitations, you may request that we update, complete, correct, or delete inaccurate, incomplete, or outdated Personal Data.
6.3 Direct Marketing Opt Out:
You can change your mind about your election to receive marketing communications from us and/or have your Personal Data processed for direct marketing purposes. If you do, please notify us by Contacting Us. It may take a few days for us to update our records before any opt-out is effective.
7. Data Retention :
7.1 Subject to applicable law, we retain Personal Data as necessary for the above purposes. We may delete data from our systems without notice to you once we deem it is no longer required for these purposes. Retention by any of our service providers may vary following their retention policies.
7.2 In some circumstances, we may store your Personal Data for more extended periods, for instance, where we are required to do so by regulatory, tax, legal, audit, and accounting requirements and so that we have an accurate record of your transactions with us in the event of any complaints, or if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings.
7.3 Please contact us if you want details regarding the retention periods for different types of your Personal Data.
8. Children :
We do not knowingly collect Personal Data from children under sixteen (16). If you become aware that an individual under the age of sixteen (16) has registered to our Services, subscribed to our marketing lists, or otherwise provided Personal Data without parental permission, please advise us immediately.
1 . Cookies :
1.1 What are Cookies :
Cookies are small pieces of data stored on your device by your web browser. They enable websites to remember certain information about your visit and enhance your browsing experience. Cookies can be classified into different categories based on their purpose and lifespan.
1.2 Types of Cookies We Use :
1.2.1 Necessary Cookies: These cookies are essential for the operation of our website and enable basic functions such as page navigation, secure access, and user authentication. Without these cookies, certain features of our Services may not function properly.
1.2.2 Performance Cookies: These cookies collect anonymous information about how visitors use our website, such as the pages they visit, the time spent on each page, and any error messages encountered. This data helps us improve the performance and usability of our Services.
1.2.3 Functionality Cookies: These cookies allow our website to remember choices you make (such as your preferred language or region) and provide enhanced features. They may also be used to provide personalized content and remember changes you make to customizable areas of our Services.
1.2.4 Advertising or Targeting Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They may also be used to limit the number of times you see an ad and measure the effectiveness of advertising campaigns. These cookies collect information about your browsing habits and may be shared with third-party advertisers.
1.3 Third-Party Cookies :
1.4 Your Cookie Choices :
Most web browsers are set to accept cookies by default. However, you can modify your browser settings to control or disable cookies. Please note that if you disable or delete cookies, some features of our Services may be affected, and certain parts of the website may not function correctly.
1.5 Data Retention :
We retain the information collected through cookies for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.
1.6 Updates to this Policy :
We may update this Policy from time to time to reflect changes in our practices or legal obligations. We encourage you to review this Policy periodically for any updates. The "Effective Date" at the top of this Policy indicates when it was last revised.
1.7 Contact Us :
Information for EU Individuals :
If you are an individual in the European Union, some additional terms and rights may apply to you.
1 . Controllers and Processors :
1.2 When we process information in the context of providing services to our customers ("Customers"), such as information about each Customer's personnel and service providers, the applicable Customer serves as a controller of the personnel and service providers' Personal Data and Company acts as a processor on its behalf.
2. We do not transfer your Personal Data out of the European Economic Area ("EEA").
3. Your Rights:
In addition to the rights described in Section 6 above, you may have certain additional rights concerning the Personal Data that other controllers or we hold about you. If you want to exercise any of these rights concerning Personal Data held by other controllers, please contact the controller (such as the relevant Customer) directly. You can also request that we contact all independent controllers. We may ask for reasonable evidence to verify your identity before we can comply with any request.
3.1 Deletion of Personal Data ("Right to Be Forgotten") :
You have a right to request the deletion of your Personal Data if either: (i) you have exercised your Right to Object (see below), (ii) it is no longer needed for the purpose for which it was collected, (iii)our processing was based on your consent, and you have withdrawn your consent, (iv) processing was unlawful, or (iv) we are required to erase it for compliance to a legal obligation.
To ensure that we do not collect any additional Personal Data, you should uninstall any of our software installed on your devices, terminate your account with us, and clear our cookies from any device where you have used our Services. We may retain specific Personal Data (including following your request to delete) as permitted by applicable law.
3.2 Right to Restrict processing:
You may ask us to limit the processing of your Personal Data if either: (i) you contest its accuracy and wish us to limit processing until this is verified; (ii) it is no longer needed for the purposes it was collected but we still need it to establish, exercise or defend of a legal claim; (iii) the processing is unlawful, but you do not want us to erase the Personal Data; (iv) you have exercised your Right to Object (below), and we are in the process to verify our legitimate basis for processing.
3.3 Right to Data Portability:
If the processing is based on your consent or performance of a contract with you and processing is being carried out by automated means, you may be entitled to (request that we) provide you or another party with a copy of the Personal Data you provided to us in a structured, commonly used, and machine-readable format.
3.4 Withdrawal of Consent :
If our Processing of your Personal Data is based upon your consent, you may withdraw your consent.
3.5 Right to Object:
If processing is based on our legitimate interest, you may object to such processing where you believe your rights and freedoms outweigh our legitimate interests. If you object, we have an opportunity to demonstrate the validity of our legitimate interest.
3.6 Right to Lodge a complaint with your Local Supervisory Authority:
You have the right to submit a complaint with the relevant supervisory data protection authority if you have concerns about your Personal Data processing. However, we ask that, as a courtesy, you please attempt to resolve any issues with us first.
California Privacy Notice :
This California Privacy Notice ("Privacy Notice ") describes how we collect, share, and store personal information about California consumers who use our Services and the choices they have regarding that information. This Privacy Notice is an integral part of our general privacy notice, available at https://orli.ai/privacy-policy ("General Privacy Notice"), to which this Privacy Notice is attached. If not otherwise defined herein, capitalized terms have the meaning given to them in our General Privacy Notice. Please read the General Privacy Notice for additional terms which may apply to you.
"Personal Information" means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could well be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by applicable law.
Personal Information we collect and why :
It is your choice whether to provide us with certain Personal Information. However, if you refuse to do so, we may not be able to register you to the Site, or you may not be able to use our Services.
Information we collect from you directly:
We had collected the following information directly from you in the preceding 12 months and for the following purposes when you used the services :
Register for an Account:
We collect identifiers such as your full name and email address when you register for an account. This information may include information from third-party providers you access our Services, such as Google, Github, or others, and any other information we deem reasonably necessary to verify your identity. We use this information to manage your relationship with us. We use this information to suggest other products or services you might be interested in.
Sign up for our mailing list or newsletter, apply for a job or register for events :
We collect identifiers such as your full name and email address, location, an affiliated company, role, etc., when you sign up for our mailing list, apply for a job, or register for events. We use this information to provide you with emails related to promotions, product launches, and service information and to respond to your inquiries or requests. You can unsubscribe any time from these emails by clicking the unsubscribe button at the bottom of any such emails.
Order products or services :
We collect identifiers such as your email address, name, and business address. We use this information to process transactions and provide goods or services.
Contact us :
Suppose you contact us for technical support or assistance with our services or products. In that case, we collect your identifiers, such as your email address and name, and any other personal information you choose to provide in such support requests. We use this information to respond to your queries and provide the support or technical assistance you request.
Additional uses :
We may also use the Personal information detailed above as permitted by any applicable laws, including to (i) comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons; (ii) cooperate with law enforcement agencies concerning conduct or activity that we reasonably and in good faith believe may violate applicable law; and (iii) exercise or defend legal claims.
Information We Collect from You Automatically :
We collected the following information from you automatically in the preceding 12 months and for the following purposes when you used the Services :
When you use our Services, we automatically collect identifiers such as your IP address, location information, and Internet and other electronic network activity, such as usage data about your browsing actions and patterns related to our Services. We also collect the type of device and operating system, and technical data about your equipment. Third parties are on our behalf, and we collect this data using the following and similar technologies:
Customer Data : We collect data regarding how our customers' systems and code are used, planned, accessed, and developed by employees and service providers of such Customers. Additionally, names, emails, and Git provider profiles may be processed.
Access Data : Data concerning individuals who access our Services through various means of access, including but not limited to browsers, mobile apps, and APIs. Access Data can include information that is used for your identification or authentication or to login into our various tools and services, such as names and email addresses, as well as profiles and account information from third-party services such as source code and project management tools, and metadata of a user's activity on such third party services.
Site Cookies : The Services may utilize "cookies". Web beacons. We use web beacons to collect how you view and interact with emails from us, including which links you click. We use this information to find out more about users, including demographic information and usage patterns, for more accurate reporting and to improve the effectiveness of our marketing.
Information We Collect from Third Parties about You :
We had collected the following information from third parties about you in the preceding 12 months and for the following purposes when you used the services:
If you apply for a job with us, we, or a third party operating on our behalf, collect the information you provide as part of your application and during the application process. This may include your name, contact details, resume, recommendations, and any other information we may request or that you choose to share with us. More information can be found here.
Additional Uses :
We may also use the Personal Information detailed above as required or permitted by any applicable laws, including to :
Comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons.
Cooperate with law enforcement agencies concerning conduct or activity that we reasonably and in good faith believe may violate applicable law.
Exercise or defend legal claims.
Additionally, we may use the Personal Information detailed above (i) in an identified manner, which does not reasonably identify you and cannot reasonably be linked to you; or (ii) as aggregate consumer information, which does not contain any individual consumer identities and is not linked or reasonably linkable to you, your household or device. Your Rights – How to Access and Limit Our Use of Certain Personal Information
Subject to certain exemptions, you have certain rights concerning the Personal Information we have collected about you, as detailed below. By applicable law, we may ask for reasonable evidence to verify your identity before we comply with sure of your requests, as described below :
Right of access :
You have the right to request that we disclose to you any or all of the following in respect of the 12 months preceding your request:(i) the specific pieces of Personal Information that we have collected about you;(ii) the categories of Personal Information we have collected about you;(iii) the categories of sources from which we collected the Personal Information about you;(iv) the categories of third parties with whom we share Personal Information about you;(v) if applicable, the categories of Personal Information about you we have sold and the categories of third parties to whom we have sold such Personal Information;(vi) the categories of Personal Information about you we have disclosed for a business purpose and the categories of third parties to whom we have disclosed such Personal Information; and(vii) our business or commercial purpose(s) for collecting or selling your Personal Information.
To request any of the information detailed above, please submit a verifiable request by contacting us at email@example.com. You may only request to exercise your right of access twice within 12 months.
Right to delete :
Subject to certain exceptions, you have the right to request that we and any of our service providers delete Personal Information about you collected by us. To request the deletion of your Personal Information, please submit a verifiable request to us by contacting us at firstname.lastname@example.org or through the following webpage https://orli.ai/support.
Right to opt-out of the sale of Personal Information :
If we start selling your Personal Information in the future, we will provide information on our webpage, allowing you to opt-out.
Right to non-discrimination for exercising your consumer privacy rights :
You have the right not to be discriminated against by us for exercising your consumer privacy rights, such as not being denied any goods or services or charged different prices or rates.
How to exercise your California privacy rights?
Submitting a verifiable request:
To exercise your right to know or right to delete, you must submit a request containing sufficient information that allows us to reasonably verify you are the person about whom we collected the applicable Personal Information. Any requests made through your password-protected account will be verified through our existing authentication procedures for such accounts.
Children We do not knowingly sell the Personal Information of California residents under 16 years old.
Title: Orli Privacy
Email address: email@example.com
Postal address: 165 Avenue de Bretagne, 59000 Lille, France