Privacy Policy

1. Who We Are (Data Fiduciary)

Oronzo LLP is a Limited Liability Partnership incorporated under the LLP Act, 2008, with its registered office at WeWork, K. Raheja Mindspace, Madhapur, Hyderabad — 500081, Telangana, India. For purposes of the DPDP Act 2023, Oronzo acts as the Data Fiduciary in respect of personal data collected directly from platform users.

Where you, as a Subscriber, use Oronzo Desk to process personal data of your own employees or end users, you are the Data Fiduciary and Oronzo acts as a Data Processor on your instructions.

2. Data We Collect

• Account data: name, work email address, job title, organisation name.
• Billing data: billing name, address, GSTIN. Payment card numbers are processed by PCI-DSS compliant payment partners — we do not store card numbers.
• Usage data: log data, IP addresses, browser type, feature interactions, and performance metrics.
• Support data: content of support tickets, chat transcripts, and feedback.
• Subscriber content: incident records, change requests, CMDB entries, and other data you enter into the platform.

3. How We Use Your Data

• To provide, operate, and improve the Oronzo Desk platform.
• To process subscription payments and issue invoices.
• To send transactional communications (account notifications, security alerts).
• To provide customer support.
• To comply with legal obligations under Indian law.
• To detect and prevent fraud, abuse, and security incidents.

We do not use your data for advertising or sell it to third parties.

4. Sharing & Disclosure

We share personal data only in the following circumstances:

• Service providers: cloud infrastructure (AWS), payment processors, email delivery services, and analytics tools — all bound by data processing agreements.
• Legal obligations: when required by a court order, government authority, or applicable law.
• Business transfers: in connection with a merger, acquisition, or sale of assets — with prior notice to affected users.

5. Data Retention

We retain account data for the duration of your subscription plus 90 days after termination, during which you may export your data. After 90 days, data is permanently deleted from all systems including backups. Anonymised aggregate data may be retained indefinitely for product improvement.

6. Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Encryption at rest (AES-256) and in transit (TLS 1.2+).
• Role-based access controls with the principle of least privilege.
• Regular security audits and vulnerability assessments.
• Incident response procedures aligned with DPDP Act 2023 requirements.

In the event of a data breach affecting your data, we will notify you within 72 hours of becoming aware, as required under the DPDP Act 2023.

7. Your Rights

As a Data Principal under the DPDP Act 2023, you have the right to:

• Access a summary of personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Erase your personal data (subject to legal retention obligations).
• Withdraw consent for processing at any time.
• Nominate a person to exercise these rights on your behalf.
• Grieve to our Grievance Officer or the Data Protection Board of India.

To exercise any right, write to compliance@oronzo.io.

8. Cookies

We use strictly necessary cookies for authentication and session management, and optional analytics cookies to understand platform usage. You can disable optional cookies in your browser settings. We do not use advertising or third-party tracking cookies.

9. Grievance Officer

In compliance with the DPDP Act 2023 and IT Rules 2021, the following officer is designated to handle privacy grievances:

If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated by updating the "Last updated" date above and, where appropriate, by email or in-product notice at least 7 days before they take effect.

11. Contact Us