Privacy Policy

Operator: American Digital Business LLC (“Oriax”, “we”, “us”). Contact: admin@oriax.ai

This Privacy Policy explains how Oriax (oriax.ai and app.oriax.ai, the “Service”) collects, uses, stores and shares information when a business (“Customer”, “you”) uses the Service, including when you connect third-party accounts such as QuickBooks Online, bank accounts via Plaid, Stripe, Google Workspace, Meta, TikTok, LinkedIn or Garmin.

Account information. Name, business name, email address, phone number and login credentials you provide when creating an Oriax account.

Connected-service data. When you authorize a connection, we access data from that service on your behalf. For QuickBooks Online this includes company information, chart of accounts, customers, vendors, invoices, bills, payments, purchases and related transaction data. We access only the scopes you approve during the OAuth authorization flow and we do not receive your QuickBooks password.

Usage data. Log data such as IP address, browser type, pages visited, actions taken in the Service and error diagnostics (including provider request identifiers such as Intuit’s intuit_tid) used for security and troubleshooting.

We use information to provide and operate the Service; to display, summarize and analyze your own business data inside your Oriax panel; to answer questions you ask the Oriax AI assistant about your data; to maintain, secure and troubleshoot the Service; to communicate with you about your account; and to comply with legal obligations.

Artificial intelligence. Oriax uses large language models to summarize and explain your data. Depending on the model your business selects in the Service, requests are processed either by a model operated by American Digital Business LLC on infrastructure we control, or by a third-party artificial intelligence provider acting as our processor under contractual terms that prohibit using your data for training. Your connected-service data is processed at the time of your request, for you only.

We do not use QuickBooks data or other connected-service data to train artificial intelligence models, and no model provider is permitted to do so with data we send on your behalf. You can see and change which model your business uses at any time from the Engine screen in your Oriax panel.

We do not sell personal information or Customer data. We share information only with:

• Service providers that host or support the Service under confidentiality obligations — cloud hosting and database providers, third-party artificial intelligence providers (text, voice, image and video), telephony and messaging providers, transactional email providers, push-notification services (Apple and Google), and Plaid (bank connectivity, when you connect a bank).
• The third-party services you choose to connect, to the extent needed to operate the connection.
• Authorities, when required by law.
• A successor in the event of a merger or acquisition, subject to this policy.

Data obtained from one Customer’s connected accounts is never shown to, aggregated with or used for the benefit of any other Customer.

Our use of information received from Intuit APIs complies with Intuit’s developer policies. You may disconnect QuickBooks at any time from the Connections screen in your Oriax panel or from the Apps section in QuickBooks Online. When you disconnect, we revoke our access tokens and stop retrieving new data; previously synced data is deleted within 30 days unless you ask us to remove it sooner.

The Oriax extension for Chrome lets the Oriax agent carry out tasks in your own browser that you (or an agent you have switched on in your Oriax panel) ask it to do — for example, opening a website you are already signed in to and bringing back a figure.

What it reads. While it works on a task, the extension reads the page it is working on (its text, the structure of its buttons and fields, and screenshots of it) and the titles and addresses of your open tabs, so it can decide where to work. It uses the sessions you already have open in Chrome; it never reads the passwords saved in your browser. Values you mark as secret in a task are typed into the page but never shown to the model.

Where it goes. To decide each step, page text and screenshots are sent to a language model: one running on your own computer if you have set one up, otherwise the model operated by American Digital Business LLC for Oriax. Each step, with its screenshot, is saved in your Oriax account so you can review what was done, and is kept and deleted like the rest of your Oriax data.

What it never does. It does not act without a task created from your Oriax account, it does not collect browsing history, and the data it handles is not sold, used for advertising or used to train models. You can stop a task at any moment from the extension or remove the extension from Chrome. Our use of this information complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

We keep account information while your account is active. Connected-service data is retained while the connection is active and for up to 30 days after disconnection or account termination, after which it is deleted or anonymized, except where retention is required by law.

We protect information with encryption in transit (TLS) and at rest, encrypted storage of OAuth access and refresh tokens, row-level isolation between customers enforced by the database itself, role-based access limited to authorized personnel, and monitoring of our infrastructure. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you as required by applicable law.

Depending on where you are located you may have rights to access, correct, export or delete your personal information, or to object to or restrict certain processing. To exercise these rights, or to delete your account and associated data, email admin@oriax.ai. We will respond within 30 days.

The Service is operated from the United States. If you access it from outside the U.S., your information will be transferred to and processed in the U.S.

The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

We may update this policy from time to time. We will post the new version at oriax.ai/privacy and update the effective date; material changes will be communicated by email or in-app notice.

American Digital Business LLC — admin@oriax.ai