← Back to app

Privacy Policy

Effective 2026-08-24 · OreLens Technology
Before you rely on this: this is a solid, standard privacy policy written to accurately describe what OreLens actually collects and does with it today — it hasn't been reviewed by a lawyer, and doesn't yet address region-specific obligations (GDPR, CCPA, etc.) in detail. Have counsel review it, especially before onboarding customers in jurisdictions with specific data-protection requirements.

1What we collect

CategoryExamples
Account informationEmail address, hashed password, company name, role
Customer Data you uploadAreas of interest, drill-hole and assay data, geochemical/geophysical rasters and shapefiles, any files you attach to a scan
Usage dataScans run, exports downloaded, pages/tabs visited in the app, timestamps, IP address (used briefly for rate-limiting sign-ups)
Billing dataHandled directly by our payment processor, Stripe — we receive subscription/plan status, not your raw card details (see Who we share it with)
Support communicationsAnything you send us at support@orelenstechnology.com

2How we use it

We do not sell your personal information or Customer Data to third parties, and we do not use Customer Data to serve you advertising — OreLens has no advertising product.

3Your geological data, specifically

The geological, geochemical, drill-hole, and related exploration data you upload is the most sensitive thing you give us — it can represent real, costly, proprietary exploration work. We handle it accordingly:

4Who we share it with

We use a small number of subprocessors to run the Service. Each only receives the data it needs to do its job:

SubprocessorPurpose
Hosting provider (Railway)Runs the application servers and database
Cloud storage (AWS S3)Stores uploaded files, once configured for a deployment
StripePayment processing for paid subscriptions — Stripe receives your billing/card details directly; we never see or store raw card numbers
Email delivery providerSends account verification and transactional emails
Anthropic (Claude API)Powers the optional in-app assistant, only for the specific question/context you send it in that moment — not used to train Anthropic's models per our agreement with them

We may also disclose information if required by law, or to protect the rights, safety, or property of OreLens, our customers, or the public. We'll never sell your data.

5Retention & deletion

We retain account and Customer Data for as long as your account is active, plus a reasonable period afterward in case you reactivate or need export assistance, unless you request earlier deletion. If you close your account and request deletion, we'll delete your Customer Data and personal information within a reasonable period, except where we're required to retain certain records (e.g., billing records) for legal or accounting purposes.

6Security

We use industry-standard measures to protect your data — encrypted connections (HTTPS) to and from the Service, hashed (never plaintext) password storage, and the per-customer data isolation described above. No system is perfectly secure, and we can't guarantee absolute security, but we take it seriously and will notify affected customers without undue delay in the event of a data breach affecting their data, as required by applicable law.

7Your rights

Depending on where you're located, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can exercise most of these directly in the app (e.g., account settings, data export) or by emailing support@orelenstechnology.com — we'll respond within a reasonable time, generally within 30 days.

8Cookies & local storage

OreLens doesn't use tracking or advertising cookies. The app stores your login session as a token in your browser's local storage (not a cookie) so you stay signed in between visits — this is functional, not tracking, and clearing your browser's site data will sign you out.

9Children's privacy

OreLens is a business tool for mineral exploration professionals and is not directed at, or knowingly used by, children. We don't knowingly collect personal information from anyone under 18.

10International transfers

OreLens's infrastructure may be located in [REGION — TO BE SET BASED ON ACTUAL HOSTING LOCATION]. If you access the Service from outside that region, your data may be transferred to and processed there. We take reasonable steps to ensure any such transfer is protected consistent with this policy.

11Changes to this policy

We may update this policy from time to time. We'll post the updated version here with a new effective date, and for material changes we'll make reasonable efforts to notify active accounts before they take effect.

12Contact

Questions about this policy, or to exercise a privacy right: support@orelenstechnology.com.