Last updated September 15, 2026
01Introduction and Scope
This Privacy Policy describes how Orenyx Labs, LLC, a Wyoming limited liability company ("Orenyx," "Company," "we," "us," or "our"), collects, uses, discloses, and safeguards information in connection with the Orenyx AI Engine platform, including all associated dashboards, application programming interfaces, webhooks, sandbox environments, and related services (collectively, the "Service"). This Privacy Policy applies to Customers, Authorized Users, and, where applicable, End Users whose information is processed through the Service. This Privacy Policy does not apply to any third-party website, application, or service that is not operated by Orenyx, even if accessed through or linked from the Service.
By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you must not access or use the Service.
02Eligibility and Age Restriction
The Service is intended solely for use by individuals and entities capable of forming a legally binding contract and is restricted to users who are eighteen (18) years of age or older. Orenyx does not knowingly collect, solicit, or maintain personal information from individuals under eighteen (18) years of age. If Orenyx becomes aware that it has inadvertently collected personal information from an individual under eighteen (18) years of age, Orenyx will take commercially reasonable steps to delete such information promptly. Any person who registers for an Account, or who is designated as an Authorized User, represents and warrants that they are eighteen (18) years of age or older.
03Information We Collect
We collect the following categories of information in connection with the Service: (a) Account and Subscription Data, including company name, contact information, billing address, Plan tier, billing history, and API key or credential metadata; (b) Usage and Telemetry Data, including dispatch events, bot executions, payment decisioning calls, and API request logs, which are used, among other purposes, to meter and bill usage; (c) Decision and Routing Data, including records of routing decisions, payment-decisioning outcomes, and risk signals evaluated in connection with payment events processed through the Service; (d) Workflow and Conversation State Data, including open tickets, in-flight payment records, and active bot conversation state maintained to preserve continuity across touchpoints and connected Orenyx products; (e) Payment Data, which is processed by our third-party payment processor, Stripe, Inc. ("Stripe"); Orenyx does not store raw payment card numbers; and (f) Multi-Tenant Account Data, reflecting the logical or physical separation of Customer data on shared infrastructure (Starter and Growth Plans) or dedicated infrastructure (Enterprise Plan).
We may also collect technical information automatically, such as IP addresses, device and browser identifiers, and log data generated through Customer's or Authorized Users' interaction with the Service's dashboards and administrative interfaces.
04How We Use Information
We use the information described above to: provide, operate, maintain, and improve the Service; process and route calls, tasks, tickets, workflows, and payment events on Customer's behalf; meter usage and generate invoices; evaluate risk signals in connection with payment-decisioning requests; maintain workflow and conversation state across connected Orenyx products; enforce tenant isolation and platform security; provide customer support; detect, investigate, and prevent fraud, abuse, and security incidents; comply with applicable law and enforceable governmental requests; and communicate with Customers regarding their Account, billing, and material changes to the Service.
05Call Recording and Consent
The Service answers, processes, and may record and transcribe calls between a Customer's business and its End Customers as part of its automated call handling functions. Each Customer is solely responsible for providing any notice and obtaining any consent required under applicable law, including two-party or all-party consent recording laws in the jurisdictions in which the Customer operates, before calls are recorded or processed through the Service. Orenyx provides the Customer with the capability to enable appropriate call disclosures but does not independently verify that a Customer has provided such notice or obtained such consent.
06Disclosure of Information
We may disclose information to: (a) Stripe, for the purpose of processing subscription and usage-based billing; (b) infrastructure, hosting, and cloud service providers that support the multi-tenant and dedicated environments on which the Service operates; (c) other Orenyx-operated products that share the Orenyx AI Engine backend, solely to the extent necessary to provide cross-product routing and workflow continuity that Customer has enabled; (d) professional advisors, including legal, accounting, and audit service providers; (e) a successor entity in connection with a merger, acquisition, financing, or sale of assets; and (f) governmental or regulatory authorities where required by applicable law, subpoena, or other legal process, or where necessary to protect the rights, property, or safety of Orenyx, its Customers, or third parties. We do not sell personal information, as that term is defined under applicable state privacy law, in exchange for monetary consideration.
07Multi-Tenant Data Isolation
The Service enforces logical data isolation between Customer tenants on shared infrastructure and provides physically or logically dedicated infrastructure for Enterprise Plan Customers. Notwithstanding these safeguards, no method of data isolation, transmission, or storage is completely secure, and Orenyx cannot and does not guarantee the absolute security of any information processed through the Service.
08Data Retention
Usage, telemetry, decision, and routing logs are retained according to Customer's subscribed logging tier: basic logging is retained for seven (7) days, full logging is retained for thirty (30) days, and premium or custom retention periods are retained as separately agreed with Enterprise Customers. Account and billing records are retained for so long as reasonably necessary to comply with our legal, accounting, and tax obligations, to resolve disputes, and to enforce our agreements, after which such records are deleted or de-identified in accordance with our internal data retention practices.
09Your Rights and Choices
Depending on the jurisdiction in which you reside, you may have certain rights with respect to personal information we hold about you, which may include the right to request access to, correction of, or deletion of your personal information, and the right to opt out of certain processing activities. Where Orenyx acts as a processor or service provider on behalf of a Customer with respect to End User data, such requests should be directed to the applicable Customer, who acts as the controller of that data; Orenyx will provide reasonable assistance to Customers in responding to such requests as described in the applicable Data Processing Addendum. Where Orenyx acts as a controller of Customer Account data, requests may be directed to us using the contact information in Section 13.
10U.S. State Privacy Disclosures
To the extent applicable state privacy laws (including but not limited to laws of California, Colorado, Connecticut, Utah, and Virginia) apply to our processing of personal information, Orenyx processes such information as described in this Privacy Policy and, where Orenyx is the processor or service provider, in accordance with its contractual obligations to the applicable Customer. Orenyx does not use, retain, or disclose personal information it processes on behalf of Customers for any purpose other than providing the Service, as required or permitted by applicable law.
11International Data Transfers
The Service is operated from the United States, and information collected through the Service may be transferred to, stored, and processed in the United States or other jurisdictions in which Orenyx or its service providers maintain infrastructure. By using the Service, you consent to such transfer, storage, and processing.
12Data Security
Orenyx maintains administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of information processed through the Service, consistent with the practices described in the Orenyx Security Statement. No security program can guarantee absolute security, and Orenyx disclaims liability for unauthorized access resulting from causes outside its reasonable control.
13Changes to this Privacy Policy
Orenyx may update this Privacy Policy from time to time. Material changes will be indicated by revising the "Last Updated" date above, and, where required by applicable law, additional notice will be provided. Continued use of the Service following the posting of an updated Privacy Policy constitutes acceptance of the revised terms.
14Governing Law and Contact
This Privacy Policy is governed by the laws of the State of Wyoming, without regard to its conflict of laws principles, except to the extent such laws are preempted by or inconsistent with applicable federal law. If you have questions regarding this Privacy Policy or Orenyx's data practices, you may contact us at legal@orenyxengine.com or at 30 N Gould St, Sheridan, WY 82801, Wyoming.