EN
Book a demo

Legal

Privacy Policy

Last updated: 5 October 2026

1. Who is responsible

This policy covers the website orey.ai. The controller under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR) is Orey Labs GmbH, Zurich, Switzerland (referred to below as "we," "us," "OREY")

Privacy questions and requests: privacy@orey.ai. Everything else: founders@orey.ai

This policy is about the website only. When a client runs interviews with OREY, how that interview data is handled is agreed in writing with the client before anyone is invited, and each participant is told at the start of the conversation

2. What we collect, and why

  • Server logs Our hosting provider automatically records technical data such as IP address, browser type, page requested and time of the request. We use it to keep the site secure and working. Legal basis: our legitimate interest in a secure, reliable website (Art. 6(1)(f) GDPR)
  • Website analytics We use Umami to count page views and see which pages people read. Umami sets no cookies, does not store your IP address and does not follow you across other websites. It records the page visited, the referring page, and coarse details such as browser, operating system, device type and country. Legal basis: our legitimate interest in understanding which pages are useful (Art. 6(1)(f) GDPR)
  • Booking a demo Nothing is loaded from Cal.com until you click "Book a demo". The click opens our booking page on Cal.com, which then receives your IP address and browser details. If you book, Cal.com also collects the details you enter (such as your name, email address and any note you add) and passes them to us so we can hold the meeting. Legal basis: steps you ask for before a possible contract (Art. 6(1)(b) GDPR)
  • Email If you write to us, we keep your email address, your name if you give it, and what you wrote, so we can reply and follow up. Legal basis: steps before a possible contract, or our legitimate interest in answering you (Art. 6(1)(b) and (f) GDPR)

This site sets no cookies and uses no advertising or visitor-identification trackers. We do not sell or rent your data, and we do not use it for marketing without your separate consent

3. Who processes it for us

We use a small number of providers, each acting on our behalf and only for the purpose described:

  • Microsoft Azure (Static Web Apps) Hosts this website and its server logs
  • Umami Cloud Provides the analytics described above. Our account uses Umami's European region, so the analytics data is stored and processed in the EU
  • Cal.com Runs our booking page. Cal.com, Inc. is based in the United States. See the Cal.com privacy policy

Fonts are loaded from our own server, not from Google or any other third party

Links to our LinkedIn and X pages are plain links. Nothing is loaded from those networks until you click, and from then on their own privacy policies apply

4. Data outside Switzerland and the EU

Some providers above are based in, or may process data in, the United States. Where personal data leaves Switzerland or the EU/EEA, we rely on an adequacy decision or on the provider's standard contractual clauses

5. How long we keep it

Emails and booking details are kept as long as needed to answer you and follow up, and then deleted unless the law requires us to keep them longer. Server logs are deleted on the hosting provider's standard rolling basis. Analytics data contains no personal identifiers

6. Your rights

Under the FADP and, where it applies, the GDPR, you can ask us to:

  • tell you what personal data we hold about you (access)
  • correct data that is wrong (rectification)
  • delete your data, unless the law requires us to keep it (erasure)
  • restrict how we use it (restriction)
  • give you your data in a common, machine-readable format (portability)
  • stop using it where we rely on our legitimate interest (objection)
  • withdraw any consent you gave, with effect for the future

Email privacy@orey.ai. We answer within 30 days

7. Complaints

You can complain to a data protection authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch. In the EU/EEA you can go to the authority where you live or work. We would be grateful if you wrote to us first, so we can try to fix it

8. Security

This site is only served over an encrypted connection (HTTPS)

9. Governing law and changes

This site is operated from Switzerland and this policy is governed by Swiss data protection law, without prejudice to any rights you have under the GDPR if you are in the EU/EEA. We update this policy when what we do changes. The version on this page always applies, and the date at the top shows when it last changed