Privacy Policy

This Privacy Policy describes how Orisun Labs LLC (“Orisun Labs,” “we,” “us,” or “our”) collects, uses, and shares information when you visit our website at orisunlabs.com (the “Site”) or use any of our software products and services (collectively, the “Services”).

By using the Site or our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Site or Services.

Information We Collect

We collect information you provide directly to us and information collected automatically when you use the Site or Services.

Information You Provide

• Contact form submissions — When you fill out the contact form on our Site, we collect your name, email address, and the content of your message, along with any optional fields such as company name, project type, or budget range.
• Email correspondence — If you contact us directly via email, we receive and store that communication.
• Account information — For certain products (such as Èdè or Anima), we may collect account registration data including name, email address, and username.

Information Collected Automatically

• Usage data — We may collect information about how you interact with the Site, including pages visited, time spent, and referring URLs.
• Device information — We may collect information about the device you use to access the Site, including browser type, operating system, and IP address.
• Log data — Our servers automatically record certain information when you use the Site, including your IP address, browser type, and the date and time of your request.

How We Use Information

We use the information we collect for the following purposes:

• To respond to your inquiries, messages, and requests submitted through the contact form or via email
• To provide, operate, and improve our Services and software products
• To send transactional communications related to your use of our products (e.g., account verification, in-app notifications)
• To analyze usage patterns and improve the functionality and user experience of the Site and Services
• To detect, investigate, and prevent fraudulent transactions or other illegal activities
• To comply with legal obligations and enforce our Terms of Service

We do not sell your personal information. We do not use your personal information for advertising or marketing purposes beyond direct responses to your own inquiries.

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

• Service providers — We may share information with third-party vendors who assist us in operating our Site or delivering Services (e.g., cloud hosting, analytics, payment processing). These providers are contractually required to keep information confidential and use it only for the purposes for which it was disclosed.
• Legal requirements — We may disclose information if required to do so by law or in response to valid legal process (e.g., a court order, subpoena, or government request).
• Protection of rights — We may disclose information when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Orisun Labs, our users, or others.
• Business transfers — In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.

Cookies & Tracking

The Orisun Labs website uses minimal cookies. We may use essential cookies to ensure the Site functions correctly (e.g., session state). We do not use advertising or cross-site tracking cookies.

Some of our third-party service providers (such as analytics tools) may set cookies on your device. You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain features.

We do not currently use third-party advertising networks or behavioral tracking technologies on this Site.

Third-Party Services

Our Services and products integrate with third-party platforms and APIs. Each third party has its own privacy policy governing how they handle data:

• Firebase (Google) — Used for authentication and database storage in Èdè and Anima. See Firebase Privacy.
• Supabase — Used for database and authentication in Revi and Thriftify. See Supabase Privacy Policy.
• Stripe — Used for payment processing where applicable. Stripe is PCI-compliant. See Stripe Privacy Policy.
• RevenueCat — Used for in-app subscription management. See RevenueCat Privacy Policy.
• Apple App Store — Apps distributed through the App Store are subject to Apple’s privacy policies and platform guidelines.

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies directly.

Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure backend infrastructure through established cloud providers, and access controls.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

You are responsible for maintaining the confidentiality of any account credentials (passwords, tokens) associated with our Services.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — You may request a copy of the personal information we hold about you.
• Correction — You may request that we correct inaccurate or incomplete information.
• Deletion — You may request that we delete your personal information, subject to certain legal exceptions.
• Opt-out — You may opt out of receiving non-essential communications from us at any time by contacting us directly.
• Data portability — Where applicable, you may request your personal information in a structured, machine-readable format.

To exercise any of these rights, contact us at hello@orisunlabs.com. We will respond to your request within 30 days.

If you are a resident of the European Economic Area (EEA) or United Kingdom, you may also have rights under the General Data Protection Regulation (GDPR) or UK GDPR. If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA).

Children’s Privacy

Our Site and Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly.

If you believe we have collected information from a child under 13, please contact us at hello@orisunlabs.com.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we update this policy, we will revise the “Last updated” date at the top of this page.

We encourage you to review this policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of the Site or Services after any changes to this policy constitutes your acceptance of the updated terms.

For material changes that significantly affect your rights or how we handle your information, we will make reasonable efforts to provide more prominent notice, such as an email notification to registered users.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

• Email — hello@orisunlabs.com
• Mailing Address — Orisun Labs LLC, Brookhaven, Pennsylvania 19015

We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.