Privacy Policy

Last updated: October 27, 2026

This policy explains what data Embark Studio ("Oryn", "we") collects when you use the Oryn platform, why we collect it, and the choices you have. The short version: we collect what's needed to run an AI website builder for you, we don't sell your data, and our own analytics on published sites are cookieless.

1. Data you give us

Account data: your email, name and password (passwords are handled by our authentication provider and never stored by us in plain text). Company and brand details you enter, such as brand context, mission and tone of voice.

Content: the sites you build, files and images you upload, documents you attach as context, and the messages you exchange with the AI assistant — these are stored so your workspace works and your history is available to you.

Billing: payments are processed by Stripe. We store your plan, subscription state and credit usage; we never see or store full card numbers.

2. Data from your sites' visitors

Form submissions: when a visitor submits a form on a site you published, we store the submitted fields on your behalf and deliver them to your workspace inbox (plus email notifications where those are enabled for your account). You are the controller of this data; we process it only to deliver it to you.

Analytics: our built-in analytics for published sites are cookieless and do not build visitor profiles. A visitor is counted with a code that changes every day and cannot be traced back to them, and the click map records where on a page people click and how far they scroll, in total. No personal information is collected.

Other services on your sites: when a published site uses a service that sets cookies of its own (a video, a map, an ads pixel), Oryn asks its visitors first and holds that service until they accept.

3. Facebook and Instagram

If you connect a Facebook page to post from Oryn, we keep the page's id, name and picture, the Instagram professional account linked to it (its id and username), the access the page granted us, and the posts we publish or schedule for you. We use them only to publish and schedule the posts you ask for, and to show you what went out. We never read your personal profile, your messages or your friends, and we do not share this data.

Disconnecting the page in Oryn (Integrations) deletes the access at once. How to delete the rest is on our data deletion page: /data-deletion.

4. How we use data

To operate the product: rendering and hosting your sites, running AI edits you request, tracking credit usage, sending transactional email (lead notifications, account emails), and keeping the platform secure (rate limiting, abuse prevention, audit logs of administrative actions).

We do not sell personal data, and we do not use your sites or content to train our own models.

5. Processors we rely on

Oryn runs on a small set of infrastructure providers that process data on our instructions: hosting and serving, database and authentication, enterprise AI model providers (your prompts and relevant site context are sent to fulfil each request you make), payment processing (Stripe), and transactional email delivery. Each provider processes only what its role requires; the current list is available on request.

6. Cookies

The Oryn app uses only essential cookies: keeping you signed in and remembering your session. No advertising or cross-site tracking cookies. Published sites, as served by Oryn, set no cookies for analytics; the only cookie Oryn sets there remembers a visitor's answer to the site's cookie notice.

7. Retention and deletion

We keep your data while your account is active. You can delete individual sites, assets, submissions and posts from the product, and you can request full account deletion — we then remove your personal data and content within a reasonable period, except what we must keep for legal or accounting reasons.

8. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. Write to us and we will honour them; if you are in a jurisdiction with a data-protection authority, you may also lodge a complaint with it.

9. Security

Data is encrypted in transit, access to production systems is restricted, and administrative actions inside Oryn are audit-logged. No system is perfectly secure — if we learn of a breach affecting your data we will notify you as the law requires.

10. Changes

We may update this policy as the product evolves; material changes will be announced before they take effect.

11. Contact

Privacy questions or requests: support@orynmade.com.