Privacy Policy

Introduction

Kivo Ora Corp, a subsidiary of Oryon Labs Corp (“Ora,” “we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the “Platform”). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Purchase tickets to events
• Create or manage events as an organizer
• Contact us with inquiries or feedback
• Subscribe to our newsletters
• Opt in to receive SMS or other mobile communications

This information may include your name, email address, phone number, billing address, payment information, and any other information you choose to provide.

Automatically Collected Information

When you access our Platform, we may automatically collect certain information about your device and usage, including your IP address, browser type, operating system, device identifiers, pages viewed, links clicked, and the date and time of your visit.

How We Use Your Information

We use the information we collect to:

• Process ticket purchases and transactions
• Send tickets, receipts, and order confirmations
• Deliver account notifications and security messages (including one-time passcodes for authentication)
• Provide customer support and respond to inquiries
• Send promotional communications only if you have opted in
• Improve our Platform and develop new features
• Measure and improve the effectiveness of our marketing and advertising, including through third-party analytics and advertising partners
• Detect and prevent fraud and unauthorized access
• Comply with legal obligations

SMS & Mobile Messaging

If you provide your mobile phone number and opt in, Ora may send you transactional or security-related SMS messages, including but not limited to:

• One-time passcodes (2FA)
• Account verification messages
• Important account or event-related notifications

Message frequency varies. Message and data rates may apply.

You may opt out of SMS communications at any time by replying STOP to any message or by contacting us directly. For help, reply HELP.

Mobile opt-in data will not be shared, sold, rented, or disclosed to any third parties for marketing or promotional purposes.

Using Ora with AI Assistants

You can connect your Ora account to AI assistants, such as OpenAI’s ChatGPT and Cursor (made by Anysphere), through the Ora plugin. This section explains what we collect and share when you do; the rest of this Privacy Policy also applies. We receive only the requests an assistant sends to Ora on your behalf, not your full conversation with the assistant.

Connecting an Assistant

When an assistant first needs your Ora account, it opens an Ora sign-in page. You sign in with a one-time code sent to your email or phone, or with Google, and choose which of your Ora accounts (for example, an organizer or customer account) the assistant may use. If you don’t have an Ora account, one is created when you sign in. If you sign in with Google, we receive your name and email address from Google. We record which assistant is connected, which Ora account it uses, and when you approved the connection.

Information We Receive from the Assistant

• Event information you provide, such as titles, descriptions, dates, venues, ticket types and prices, promo codes, and sponsorship offers
• Images you give the assistant to add to an event, which we copy into our storage
• Your approximate location (such as your city or region) when you search for events, which we use only to find events near you and do not save to your account
• Organizers you choose to follow
• Technical information about how the plugin is used, such as which assistant and which Ora feature were used and when. This does not include your name, email address, or the text of your searches.

Information We Send to the Assistant

• Details that identify the connected account, such as your name, email address, account type, and an account identifier
• Public event information, such as event listings, dates, venues, and ticket prices
• For organizers, information about their own events: drafts, ticket types, promo codes, sales, attendance, check-in and payout totals, and links to the Ora dashboard
• When an assistant subscribes to updates, notices about your own events, such as a new sale, a sold-out ticket type, or an event starting soon

We never send attendee names, email addresses, phone numbers, or demographics to an assistant. Sales and attendance are shared only as totals; detailed attendee information stays in your Ora dashboard. Tickets are always purchased on oraapp.com, and we do not process payments inside an assistant.

Information you share with an assistant, and information we send to it at your request, is also handled under that assistant provider’s own privacy policy (OpenAI’s for ChatGPT and Anysphere’s for Cursor). We do not control how those providers use it.

Disconnecting

You can see every assistant connected to your Ora account, and disconnect any of them, under “Connected assistants” in your Ora profile or organizer settings. You can also ask the assistant to “sign out of Ora,” or contact us at help@oraapp.com. Removing the plugin inside the assistant does not, by itself, end its access to your Ora account, so please use one of these options. An assistant’s access also ends automatically if it is not used for 60 days.

Sharing Your Information

We may share your information only in the following situations:

• Event Organizers: When you purchase tickets, we share your name and email with the event organizer to facilitate your attendance.
• Service Providers: We share information with trusted third-party vendors who perform services on our behalf, such as payment processing, SMS delivery, and email delivery. These providers are contractually obligated to protect your data and use it only to provide those services.
• Analytics and Advertising Partners: We use third-party analytics and advertising technologies — including Google Analytics and the Meta (Facebook) Pixel — that may receive usage data and online identifiers (such as cookies, pixel identifiers, and device identifiers) to help us understand how the Platform is used and to measure and improve our marketing. These partners may process this information for advertising measurement and to deliver relevant ads on their own and other services. Depending on your jurisdiction and settings, this activity may be considered “targeted advertising,” “tracking,” or a “sale” or “sharing” of personal information. See “Analytics, Advertising & Your Choices” below for how to control it.
• AI Assistants You Connect: If you connect Ora to an AI assistant, we share information with that assistant’s provider as described in “Using Ora with AI Assistants” above, and only when you ask the assistant to use Ora.
• Legal Requirements: We may disclose information when required by law or to protect our rights, privacy, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not share mobile phone numbers or SMS opt-in information with third parties for their own marketing purposes.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We keep your personal information while your account is active. When you delete your account, we delete or anonymize your personal information, except for a small set of records we keep for specific reasons: records of payments, refunds, and ticket transfers; photos and videos you shared at events; and a record of your deletion request. We keep these records for 5 years after your account is deleted, and then delete them. We also keep your email address on our do-not-contact list, so we never contact you again. Event organizers may also keep the guest lists and contact lists they manage for their events.

For AI assistants, an assistant’s access to your account expires if it is not used for 60 days, and every connected assistant loses access as soon as you delete your Ora account.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access your personal information
• The right to correct inaccurate information
• The right to delete your personal information
• The right to opt out of marketing communications
• The right to data portability

Cookies and Tracking Technologies

We and our partners use cookies, pixels, software development kits (SDKs), and similar technologies for essential functionality, security, analytics, and advertising measurement. Some of these technologies are operated by third parties such as Google and Meta. On the web, we present a cookie-consent banner on your first visit so you can accept or decline non-essential (analytics and advertising) cookies, and you can also manage cookies through your browser settings. Disabling non-essential cookies may limit certain features of the Platform.

Analytics, Advertising & Your Choices

We use first-party product analytics to operate and improve the Platform, and we use Google Analytics and the Meta (Facebook) Pixel to measure and improve our marketing. You can control how your information is used for analytics and advertising:

• On our iOS app: We do not track you across apps and websites owned by other companies unless you grant permission through Apple’s App Tracking Transparency (ATT) prompt. If you decline, advertising technologies such as the Meta Pixel and Google advertising signals remain disabled. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.
• On the web: You can accept or decline non-essential analytics and advertising cookies through our cookie-consent banner, and manage cookies through your browser settings.
• US state privacy rights: Sharing information with advertising partners for cross-context behavioral advertising may be considered a “sale” or “sharing” of personal information under laws such as the California Consumer Privacy Act (as amended by the CPRA). You may opt out by declining tracking or consent as described above, or by contacting us at help@oraapp.com.

The identifiers used for advertising are online identifiers such as cookies and pixel identifiers set by our advertising partners.

Children’s Privacy

Our Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete that information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated Privacy Policy on this page and updating the “Last updated” date. You are encouraged to review this Privacy Policy periodically.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: help@oraapp.com