Privacy Policy

Orauria is a platform created and operated by 1997 Studio.

Orauria (“we”, “us”, “the platform”) operates https://orauria.com — an AI design inspiration library, prompt gallery, and Studio for AI-powered content creation.

This Privacy Policy explains how we process personal data when you visit the website, sign in, browse the gallery, use Studio AI, add credits, publish prompts, or contact support.

We are committed to processing data transparently, for clear purposes, and in compliance with applicable Vietnamese personal data protection regulations, including Decree 13/2023/ND-CP and related guidance (where applicable).

By using the service, you confirm that you have read and understood this policy. If you do not agree, please stop using the service.

Personal data: information in the form of symbols, text, numbers, images, audio, or similar electronic formats that is linked to or can identify a specific individual.

Data subject: you — a person who accesses or uses our service.

Data processor: third-party service providers we engage to operate infrastructure, authentication, analytics, or payments, under contract and only to the extent necessary.

Account information: when you sign in with Google (Firebase Authentication), we receive your display name, email address, profile photo (if available), and account identifier (UID). We do not store your Google password.

Studio usage data: prompts you enter, model parameters, reference images/video/audio, generated outputs, generation history, saved workflows, and technical metadata (time, model, status, credit cost).

Gallery & prompt publishing data: titles, descriptions, prompt text, tags, categories, preview images, recorded models, and publisher information (display name or shortened email depending on display settings).

Wallet and payment data: credit balance, ledger history (top-ups, charges, refunds/cancellations if any), order codes, amounts, payment methods (SePay bank transfer, PayPal), transaction IDs from payment providers, and transaction timestamps.

Technical data & logs: IP address, browser type, operating system, device, pages visited, access times, error codes, and cookies (see Cookie Policy).

Contact information: the content of emails or messages you send us when requesting support or filing a complaint.

Contract/service performance: processing data necessary to provide your account, Studio, credit wallet, and requested features.

Consent: in some cases such as non-essential analytics cookies, we rely on your consent (which you may withdraw as described in the Cookie Policy).

Legal obligation: retaining invoices, transactions, or providing information when required by competent authorities under applicable law.

Legitimate interests: fraud prevention, system security, and service quality improvement — to the extent they do not override your rights and legitimate interests.

Service operation: authenticating sessions, saving Studio history, displaying the gallery, processing prompt submissions, and syncing data across devices.

Payments & accounting: recording credit top-ups, charging AI model usage, reconciling SePay/PayPal transactions, and resolving payment disputes.

Product improvement: analyzing usage trends (anonymized or aggregated where possible), fixing bugs, optimizing performance, and developing new features.

Safety & compliance: detecting API abuse, spam, attacks, or Terms of Service violations; protecting users and the system.

Communication: responding to support requests and notifying you of important changes to the service, policies, or your account.

Infrastructure providers: Google Firebase / Google Cloud (authentication, Firestore, storage, analytics), and AI API providers (processing prompts and generating content at your request).

Payment gateways: SePay, PayPal, and related banks to process top-up transactions — each has its own payment data policies.

Public display: content you voluntarily publish to the gallery (prompts, sample images, tags) may be viewed, searched, and copied by other users according to product design.

We do not sell, rent, or trade your personal data to third parties for their advertising purposes.

Legal disclosure: when required by a valid request from competent authorities, or when necessary to protect the rights, property, and safety of us, our users, or the public.

Business transfers: in the event of a merger, acquisition, or restructuring, data may be transferred to a successor with equivalent protection commitments; we will notify you when required by law.

Some providers (Google, PayPal, AI API providers) may process data on servers located outside Vietnam. In those cases, data may be transferred outside Vietnamese territory under the provider's mechanisms and service agreements.

We select providers with appropriate security measures and share only the minimum data necessary to deliver the service.

Account and Studio history data: retained while your account remains active and for a reasonable period after you stop using the service, unless law requires longer retention.

Transaction & ledger data: typically retained for the minimum period required by applicable accounting and tax rules (often 5–10 years depending on document type).

Public gallery content: may continue to be displayed until you request removal or we remove it under the Terms of Service.

Technical logs: typically retained from a few weeks to a few months depending on security and operational needs.

When retention periods expire, data will be deleted, anonymized, or securely archived as required.

We apply appropriate technical and organizational measures: HTTPS/TLS transmission, Firebase authentication, API access control via tokens, and per-account data permissions.

Internal access is limited to personnel and vendors who need it to operate and support the service.

No system is perfectly secure. If we discover a security incident affecting personal data, we will notify you as required by law and/or via your registered email where appropriate.

Under applicable Vietnamese law, you may have the following rights (where applicable): to be informed about data processing; to consent or withdraw consent; to access and correct data; to delete data; to restrict processing; to receive data; to object to processing; and to complain, report, or initiate legal proceedings.

To exercise your rights, email lienhe@orauria.com with a description of your request and account verification information (sign-in email). We will respond within a reasonable timeframe as required by law.

Some deletion requests may be partially denied if we must retain data to comply with law, resolve disputes, or protect legitimate interests.

The service is not directed at anyone under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such data, we will delete it once verified.

We may update this policy when features, providers, or legal requirements change. The new version will be posted on this page with a “Last updated” date.

Material changes may be announced via the website or email. Continued use of the service after the effective date constitutes acceptance of the updated policy.

Privacy questions: lienhe@orauria.com.