Legal
Privacy Policy
Updated 01/01/2026
Orai respects the privacy of our users' personal information and content. We want to earn user trust by being careful and transparent about user-generated data.
This Privacy Policy explains what information On Time Labs, LLC (“Orai”, “us”, “we”, or “our”) collects about you and why, what we may do with that information, and how we handle your Personal Information and User Content.
This Privacy Policy is incorporated and made part of Orai’s Terms of Service located at www.orai.com/tos (the “Terms of Service”), and applies to the information obtained by us through your use of the Site, the App, the Services, the Software (collectively, the “Site”), and other Orai products and services. If you use Orai through an organization that has entered into an Order Form, data processing agreement, or other separately signed agreement with Orai, that agreement may supplement this Privacy Policy and will control to the extent it expressly conflicts with this Privacy Policy for the covered enterprise services and processing.
1. What Information Do We Collect?
A list of the Personal Information Orai may collect, and why we collect it, follows:- Your name, email address, and preferences: This lets us create your account, provide you with convenient and personalized access to your account, and deliver and support our Products. This information also helps us communicate with you about your use of our Products, product announcements, and software updates, as well as respond to your requests for assistance. In addition, we may use your Personal Information to send you direct marketing emails and special offers, but only with your prior permission. More details are provided below.
- Authentication and account-security information: We may process your Orai account identifier, sign-in method, authentication or session tokens, login timestamps, and information about account-security events. Depending on how you sign in, credentials may be processed by Orai or by an authentication provider. When you use a third-party sign-in provider, Orai generally receives the account information and authentication confirmation made available by that provider rather than your password for that provider.
- User-Locale:Orai does not explicitly request access to your location. However, your rough geographic location helps us understand how best to cater Orai to your language accent. The geographic area where you use your computer and mobile devices (as indicated by an IP address or similar identifier) and the language you select when interacting with our Products. This information also helps us improve our understanding of how our users use our products.
- Audio Recordings: Recordings created in the Orai App may be uploaded to and stored on our cloud servers, with copies also stored on your device. We store transcripts and derived coaching results so you can review prior recordings and receive personalized feedback. For non-enterprise users, this information may also be used to evaluate and improve Orai's own speech-analysis features as described below. Recordings created with Orai's browser-based audio and video recorder tools remain on your device and are not uploaded by those tools.
- Generated and inferred information: When you use Orai, we generate or infer information from your recordings, scripts, activity, and account history. Depending on the feature, this may include transcripts, word counts, speaking pace, filler words, pauses, clarity, energy or confidence indicators, coaching scores, recommendations, and progress trends. These results are estimates intended to provide practice feedback and may not always be complete or accurate.
- Other User-Generated Content:Other user content such as scripts, ratings, and other data points provided through interaction with our site may be stored by Orai. We don’t use this information for any purpose other than to:
- Provide the Services and make sure they are available to you when you use our Products.
- Improve our understanding of how you use our app. We may use third-party providers to collect aggregated information on how you navigate through our products, for example, how many people clicked on the record button over the month.
- Improve the algorithms underlying our Products.
- Unique Device Identifier:We use this information to:
- Calculate aggregate statistics on the number of unique devices using our Products.
- Detect and prevent misuse of our Products.
- Log Data:As with most websites and technology services delivered over the internet, our servers automatically collect data when you access or use our Site, Software, and/or Services and record it in log files. This log data may include the IP address, browser type and settings, the date and time of use, information about browser configuration, language preferences, and cookie data.
- Device Information:These are data from your computer or mobile device, such as the type of hardware and software you are using (for example, your operating system and browser type), as well as unique device identifiers for devices that are using the App.
- Information from integrations and sign-in providers: If you connect Orai to, or sign in through, a third-party service such as Google, Apple, or another supported provider, we receive the information you authorize that service to provide, which may include your name, email address, provider account identifier, and authentication confirmation. You can stop future sharing by disconnecting Orai or removing Orai’s access through the provider, although Orai may retain information already received as described in this Policy.
- Information from enterprise customers and administrators: If an organization provides you access to Orai, its authorized administrators may provide or manage information such as your name, work email address, team or workspace membership, role, license status, and service configuration. Administrators may also be able to manage your enterprise account and access information or reports as permitted by the organization’s agreement with Orai.
2. How Do We Use Your Information?
We may use the information we collect from you when you register, purchase products or services, respond to a survey or marketing communication or other Orai request, surf or use services offered through Orai, or use certain other Orai features in the following ways:- To operate and improve Orai and services offered through the Site.
- For non-enterprise users, to evaluate and improve Orai's own speech-analysis algorithms and product features.
- To personalize your Orai experience and to allow us to deliver the type of content and service offerings in which you are most interested.
- To allow us to better service you in responding to your customer service requests.
- To quickly process your transactions.
- To administer a promotion, survey, or other Orai features.
- To conduct internal research and create aggregated or de-identified statistics. Orai does not publish identifiable recordings or transcripts without the user's consent.
2.1 Personal Information or User Content
Orai does not sell or rent user information, and we only disclose information when:- We have your explicit consent or act at your direction to share the information. For example, using the sharing feature in the App may create a public or shareable recording link. Anyone who receives or discovers that link may be able to access the shared content and may copy, download, or redistribute it. Disabling a link or deleting the original content may not remove copies previously made by other people.
- We need to share your information with affiliated and unaffiliated service providers to fulfill your product or service requests.
- We believe it is necessary to investigate potential violations of the Terms of Service, to enforce those Terms of Service, or where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or potential threats against persons, property, or the systems on which we operate our Products.
- We determine that the access, preservation, or disclosure of information is required or permitted by law to protect the rights, property, or personal safety of Orai and users of our Products, or is required to comply with applicable laws, including compliance with warrants, court orders, or other legal process.
- We need to do so in connection with the sale or reorganization of all or part of our business, as permitted by applicable law.
2.2 Deletion/Correction/Updating Personal Information
You can correct or update your personally identifiable information through your account in the App. You can also delete your account and associated Personal Data from the App's settings. If you cannot access the App or want to submit another privacy request, contact [email protected].2.3 Do We Review User Content?
As a rule, Orai employees do not monitor or view your Personal Information or User Content stored in or transferred through our Products, but it may be viewed if we believe the Terms of Service have been violated and confirmation is required, if we need to do so in order to respond to your requests for user support, if we otherwise determine that we have an obligation to review it as described in the Terms of Service, or to improve our algorithms as described in the User Content section of our Terms of Service. Your Personal Information may also be viewed where necessary to protect the rights, property, or personal safety of Orai and its users, or to comply with our legal obligations, such as responding to warrants, court orders, or other legal process.2.4 Do We Ever Make Any of Your Personal Information or User Content Public?
Orai does not make your Personal Information or User Content public unless you direct us to share it, make it available through a public or shareable feature, or disclosure is otherwise permitted by this Policy. If you create or distribute a public or shareable link, you are responsible for choosing what to share and who receives the link. Orai cannot control how recipients use or redistribute content after they access it, and deleting the original or disabling access may not delete copies that others previously made.3. Information Access and Disclosure
3.1 Does Orai Share My Information?
We only disclose Personal Data to third parties when:- We use service providers who assist us in meeting business operations needs, including hosting, delivering, and improving our Services. We also use service providers for specific services and functions, including email communication, customer support services, and analytics. These service providers may only access, process, or store Personal Data pursuant to our instructions and to perform their duties to us. You can request exact details of our service providers by contacting us at the email mentioned below.
- We have your explicit consent to share your Personal Data.
- We believe it is necessary to investigate potential violations of the Terms of Service, to enforce those Terms of Service, or where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or potential threats against persons, property, or the systems on which we operate our Site, Software, and/or Services.
- We determine that the access, preservation, or disclosure of your Personal Data is required by law to protect the rights, property, or personal safety of Orai and users of our Site, Software, and/or Services, or to respond to lawful requests by public authorities, including national security or law enforcement requests.
- We need to do so in connection with a merger, acquisition, bankruptcy, reorganization, sale of some or all of our assets or stock, public offering of securities, or steps in consideration of such activities (e.g., due diligence). In these cases, some or all of your Personal Data may be shared with or transferred to another entity, subject to this Privacy Policy.
3.2 Does Orai Sell or Rent My Personal Data?
No, Orai does not sell or rent your Personal Data.3.3 Does Orai Use Cookies?
Cookies are small text files stored on your device and used by web browsers to deliver personalized content and remember logins and account settings. Orai uses cookies and similar technologies, including tracking pixels and web beacons, to collect usage and analytic data that helps us provide our Site, Software, and/or Services to you, as well as to help deliver ads for relevant Orai products and services to you when you visit certain pages on the Site and then visit certain third-party sites. Our products currently do not respond to Do Not Track requests.3.4 Will Orai Send Me Emails?
From time to time, we may want to contact you with information about product announcements, software updates, and special offers. We also may want to contact you with information about products and services from our business partners. You may opt out of such communications at any time by clicking the “unsubscribe” link found within Orai emails and changing your contact preferences. All Orai account holders will continue to receive transactional messages related to our Services, even if you unsubscribe from promotional emails. For EEA users: We only send marketing communications to users located in the EEA with your prior consent.3.5 Does Orai Ever Make Any of My Personal Data or User Content Public?
No, we do not share Personal Data or User Content except in the limited circumstances described by this Policy or our Terms of Service.3.6 Does Orai Collect Information from Children?
Orai does not knowingly collect personal information from children under the age of 13. If we determine we have collected personal information from a child younger than 13 years of age, we will take reasonable measures to remove that information from our systems. If you are under the age of 13, please do not submit any personal information through the Site, Service, and/or Software. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Policy by instructing their children never to provide personal information through the Site, Service, and/or Software without their permission.3.7 Billing Information
Purchases made through the Apple App Store or Google Play are processed by the applicable platform under its privacy practices. Web and enterprise purchases may be processed by Orai's payment service providers, including Stripe. Those payment providers may collect and store complete payment-card details under their own privacy practices. Orai does not receive or store complete payment-card numbers when payment details are submitted directly to those providers, but Orai and its providers may retain transaction, subscription, billing-contact, limited payment-method details, and payment-status information needed to administer purchases, prevent fraud, and meet legal obligations.4. Data Storage, Transfer, Retention, and Deletion
4.1 Where Is My Information Stored?
Information submitted to Orai is primarily transferred to, processed, and stored in the United States. When you use the App, some User Content may also be stored locally on your device and synchronized with our servers. Our current production infrastructure and service-provider locations are described in the Trust Center and subprocessor list.4.2 How Secure Is My Information?
Orai uses administrative and technical safeguards designed to protect Personal Data. Data transmitted to Orai is protected using transport layer security (TLS), and Orai uses access controls and other safeguards for information stored on its systems. No method of transmission or storage is completely secure, so Orai cannot guarantee absolute security. Additional information is available in the Trust Center. If Orai learns of a security incident involving your Personal Data, we will provide notices and information about protective steps as required by applicable law.4.3 How Can I Delete My Personal Account from Orai?
You may delete your personal Orai account and associated Personal Data from the App's settings. If you cannot access the App, you may request deletion by contacting [email protected]. We may request information reasonably necessary to verify your identity and locate your account.4.4 Consumer Account Deletion
You may start consumer account deletion from the App's settings or submit a deletion request to [email protected]. Following an in-app account deletion or verified consumer deletion request, Orai is designed to delete account-linked Personal Data from active systems within 30 days, unless retention is required for security, fraud prevention, legal compliance, dispute resolution, or another purpose permitted by law. Residual copies in ordinary-course backups are designed to expire within 30 additional days.4.5 Enterprise Data Retention and Termination
For enterprise customers, termination of the applicable service automatically begins the deletion process for enterprise customer content. Enterprise customer content is designed to be deleted from active systems within 60 days after service termination or a verified deletion request, unless an Order Form requires a shorter period or applicable law requires retention. Residual copies in ordinary-course backups are designed to expire within 30 additional days. Other enterprise records, including billing, security, and contract records, may be retained as required for legitimate business or legal purposes.4.6 Other Retention
Orai may retain limited Personal Data for as long as reasonably necessary for fraud prevention, security, tax, accounting, legal reporting, auditing, and the establishment or defense of legal claims. Identifiable or account-linked product analytics are retained according to the periods described in the Trust Center. Aggregated or de-identified information may be retained longer.4.7 For EEA Users
Orai processes Personal Data as necessary to perform its contract with you, pursue legitimate interests such as providing, securing, and improving the Services, comply with legal obligations, protect vital interests, and, where required, based on your consent. Orai relies on consent for non-essential cookies and EEA marketing communications where applicable. You may withdraw consent at any time without affecting processing that occurred before withdrawal.4.8 What Rights Do I Have, and How Can I Exercise Them?
Individuals in the EEA may have rights to access, correct, delete, restrict, or object to processing of Personal Data, and to receive certain Personal Data in a portable format. You may also withdraw consent where processing relies on consent and lodge a complaint with your local supervisory authority. To exercise a right, contact [email protected]. We may request information reasonably necessary to verify your identity and respond to the request.5. EEA Privacy Inquiries
Individuals in the European Economic Area may contact [email protected] regarding their privacy rights or questions about Orai’s processing of Personal Data.6. Can You List Your Data Sub-Processors?
Current sub-processors are listed in our public subprocessor list. We require applicable contractual safeguards from service providers that process Personal Data on our behalf.7. Will This Privacy Policy Ever Change?
As Orai evolves, we may need to update this Policy to keep pace with changes in our Site, Software, and Services, our business, and laws applicable to us and you. We will, however, always maintain our commitment to respect your privacy. We will notify you of any material changes that impact your rights under this Policy by email (to your most recently provided email address) or post any other revisions to this Policy, along with their effective date, in an easy-to-find area of the Site, so we recommend that you periodically check back here to stay informed of any changes. Please note that your continued use of Orai after any change means that you agree with, and consent to be bound by, the new Policy. If you disagree with any changes in this Policy and do not wish your information to be subject to it, you will need to delete your Orai account.8. Your California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), may provide you with the following rights, subject to applicable exceptions:- Right to know and access: You may request the categories and specific pieces of Personal Data we have collected about you, the categories of sources from which it was collected, the purposes for collecting, using, or sharing it, and the categories of third parties to whom it was disclosed.
- Right to delete: You may request deletion of Personal Data we collected from you, subject to legal and operational exceptions.
- Right to correct: You may request correction of inaccurate Personal Data we maintain about you.
- Right to opt out of sale or sharing: You may direct a business not to sell Personal Data or share it for cross-context behavioral advertising. Orai does not sell or rent Personal Data. Where our use of advertising or analytics technologies constitutes sharing under California law, you may submit an opt-out request using the method below.
- Right to limit use and disclosure of sensitive Personal Data: Where applicable, you may request that use or disclosure of sensitive Personal Data be limited to purposes permitted by California law.
- Right to non-discrimination: We will not discriminate against you for exercising your California privacy rights.