Privacy Policy

Last updated: January 01, 2026

1. Data Sovereignty

At OroSys, we treat your business data with the same reverence as the fine metals and gemstones you manage. Your inventory data, artisan records, and financial transactions are your exclusive property. We do not sell, rent, or trade your institutional data to any third party.

2. Information Collection

We collect information necessary to provide institutional-grade service:

  • Authentication data (Email, encrypted credentials).
  • Business identity (Tenant info, store locations).
  • Operational metadata (System usage patterns to optimize performance).
  • Payment information (Handled securely via PCI-compliant processors).

3. Infrastructure Security

Our platform is engineered on a secure, high-availability architecture. All data is encrypted at rest and in transit using industry-leading protocols. We conduct regular security audits to ensure your business remains resilient against digital threats.

4. User Privacy Rights

As an OroSys user, you have the right to request a full export of your data at any time. You may also request the permanent deletion of your account and all associated data, subject to local regulatory requirements for financial record keeping.

5. Institutional Contact

For privacy-related inquiries or data orchestration requests, please contact our Data Privacy Officer at privacy@orosysbd.app.