Privacy, plainly stated.

Invite-only access.

Orami is invite-only. We collect the email address an invitation is sent to and, when you accept it, the account details Clerk (our sign-in provider) creates for you.

Your subscription.

Payment is handled by Square. We store what plan you are on and your billing status; we do not store your card details ourselves — Square does.

Who processes your data.

Clerk handles sign-in and account security. Cloudflare hosts the application, your database, and your uploaded files. Square processes payments and online orders. Google Places supplies business details when you import them, and OpenAI generates text when you use "Write it for me." Each only sees what it needs to do its job.

Imported business data.

When you search for your restaurant on Google Places, we keep only its place ID (so we can look it up again) and its coordinates, and the coordinates are deleted after 30 days. Nothing else from Google is stored until you confirm and import it into your own site — at that point it's yours, not Google's.

Instagram content.

If you connect Instagram, Orami uses the Instagram API from Meta with read-only access (instagram_business_basic) to your username, account id and account type, and to your recent posts: id, caption, link, date and image. We use it only to import the photos you pick into your own restaurant website, and we never post, message or comment for you. We store your access token encrypted, and we store copies of the photos you import. Your imported photos and their Instagram links are shown publicly on your website. We do not sell this data, use it for advertising, or share it beyond the processors listed above.

Instagram retention and disconnecting.

We keep your token until you disconnect or it expires, and imported photos until you remove them or ask us to delete them. If an imported post is deleted on Instagram, we remove our copy within 24 hours of detecting it. Disconnect in your dashboard under Website, then Instagram, or remove Orami in Instagram under Settings, then Apps and websites.

Deleting your data.

To delete your Instagram data, including imported photos, follow the instructions on our data deletion page. We complete deletion within 30 days.

Cookies.

We use cookies to keep you signed in and to remember basic preferences. We do not use them for third-party advertising.

Your diners' data.

Order and reservation details a diner gives your restaurant belong to your restaurant. We store them to run the order or reservation and do not sell them.

Changes.

We may update this policy and will tell you.