Who we are
Oree AI Ltd is a company registered in England and Wales, with its registered office at 24 Shoreditch Rd, London E1 6QL. For questions about this policy or about how we process your data, contact privacy@oree.ai.
For personal data collected from customers (you), Oree AI Ltd is the data controller. For personal data that we process on your behalf in order to reach your prospects (prospect data), Oree AI Ltd is a data processor and you are the controller.
What we collect
Customer data (you)
- Name, work email, company, role, and phone number.
- Company address and billing information.
- Authentication identifiers and session tokens.
- Content you upload (brand documents, voice samples, ICP criteria).
- Usage data: pages visited, feature interactions, timestamps.
Prospect data
On your instruction, we process information about the prospects you want to reach. This includes names, business email addresses, phone numbers, job titles, company information, and publicly available signals (LinkedIn posts, hiring activity, press coverage). Sources include your uploads, our lead-sourcing partners, and publicly available information.
How we use data
- To deliver the Service: create accounts, authenticate you, generate outreach content, send email and manage mailboxes on your behalf, track engagement.
- To improve the Service: debug, monitor performance, measure aggregate feature usage.
- To bill you: process payments through our payment provider.
- To communicate with you: service updates, reply notifications, security alerts, and (if you opt in) product news.
- To meet legal obligations: tax, anti-fraud, regulatory requests.
Legal bases (UK & EU GDPR)
- Contract: delivering the Service you subscribed to.
- Legitimate interest: running and securing the platform, preventing abuse, and B2B outreach you instruct on behalf of your company.
- Consent: where required, for optional marketing and non-essential cookies.
- Legal obligation: compliance with tax and law.
Who we share data with
We use a small set of vetted sub-processors. Each is bound by a data processing agreement.
- Cloud infrastructure: AWS, Google Cloud (hosting, storage, logging).
- AI providers: Anthropic (content generation). Inputs used to generate drafts are not used to train their models.
- Payments: Stripe, Inc. — card details go directly to Stripe; we never store your card.
- Email sending & mailbox management: Google Workspace, Postmark, our transactional email provider.
- Lead sourcing & enrichment: Exa, Airscale, Apify.
- Communications with you: Intercom (support), Postmark (transactional email).
We do not sell personal data, and we do not share customer or prospect data with advertisers.
International transfers
Some of our sub-processors are located outside the UK or EEA. Where they are, we rely on UK International Data Transfer Agreements or Standard Contractual Clauses together with supplementary measures where appropriate.
How long we keep data
- Account data: for the duration of your subscription plus up to 12 months for compliance.
- Prospect data: for the duration of your subscription. On account deletion we purge within 30 days.
- Email event history (opens, replies, bounces): 24 months rolling.
- Billing records: 6 years (statutory tax requirement).
Your rights
Subject to the UK and EU GDPR, you have the right to access, correct, delete, restrict, and port your personal data, and to object to certain processing. To exercise a right, email privacy@oree.ai. If you're not satisfied with our response, you may lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or your local supervisory authority.
Security
We use encryption in transit (TLS) and at rest, role-based access control, audit logging, regular vulnerability scanning, and the principle of least privilege. No system is perfectly secure; if you suspect a breach contact security@oree.ai immediately.
Cookies
We use cookies to keep you signed in and to measure aggregate usage of the site. Non-essential cookies are only set with your consent.
Children
Oree is a B2B product and is not intended for individuals under 18.
Changes
If we make material changes to this policy we'll notify you by email or via a notice on the product at least 30 days before the change takes effect.
Contact
Data protection queries: privacy@oree.ai
Security incidents: security@oree.ai
Post: Oree AI Ltd, 24 Shoreditch Rd, London E1 6QL, United Kingdom