01Who we are
Orolens is owned and provided by Adfinite Solutions LLP (“Adfinite”, “we”, “us”) on an “as is” basis. This policy explains how we handle personal data on the Orolens website, app and API, and should be read with our Terms of Service.
02What we collect
- Account details: your name, email address and password (stored only as a secure one-way hash). If you sign in with Google, we receive your name, email address and profile picture.
- Workspace details: workspace name and logo, the members you invite and their roles.
- Your content: product photos you upload or import, product details, prompts and settings, and the images Orolens creates for you.
- Store connections: if you connect a Shopify store, the access it grants to your product catalog. We do not access your customers or orders.
- Billing: your plan, purchases and credit history. Payments are handled by our payment provider; we never see or store your full card details.
- Usage and technical data: what you generate and the credits it used, plus technical data such as your IP address, used to keep the service secure and working.
- Messages: what you send us through the contact form or other channels.
03How we use it
- To run your account and generate the images, batches, imports and exports you ask for.
- To take payments, add credits and keep accurate billing records.
- To answer your questions and send service emails, such as sign-in codes and batch updates.
- For internal testing and evaluation, and to improve Orolens.
- To keep Orolens secure and prevent fraud and abuse.
- To meet legal, tax and accounting duties.
04AI processing
The photos, prompts and other data you provide are processed through different large language model (LLM) and generative AI service providers, including but not limited to OpenAI, Google Gemini, Google Vertex AI, Anthropic, DeepSeek and models available through OpenRouter.
By using Orolens, you also allow us to use the data you provide for internal testing and evaluation of the service.
How each AI provider processes data depends on its own terms and policies. Providers such as OpenAI, Anthropic and the Google Gemini API state in their terms that data sent through their APIs is not used to train their models. That is their commitment, as their terms and policies state it: we cannot guarantee it on their behalf or for any other provider’s models, and we are not responsible for how those providers handle data.
06Storage and security
Our providers may store and process data in India, the United States and other countries. Connections to Orolens are encrypted, passwords are hashed and access to production systems is limited to the people who need it.
Images are served from long, unguessable links so they load quickly in the app and in your exports; anyone you share such a link with can open that image. No system is perfectly secure, but we work to protect your data and will act as the law requires if a breach affects it.
07How long we keep it
We keep your account data and content while your account is open. When you ask us to delete your account, we delete it within 30 days, together with the workspaces you alone own and their images. Billing records are kept for as long as tax and accounting law requires.
09Your rights
Depending on where you live, you can ask to see, correct or delete your personal data, get a copy of it, or withdraw a consent you gave. To make a request, contact us using the email on your account. You can also complain to the data protection authority where you live.
10Children
Orolens is for businesses and is not meant for anyone under 18. We do not knowingly collect personal data from children.
11Changes to this policy
We will update this policy when our practices or the law change. The date at the top shows the latest version.