oriri® privacy policy

1. Who we are

oriri BV, Hoogstraat 43, 2800 Mechelen, Belgium (enterprise number 1003.053.442) is the controller of the personal data processed through oriri: oriri.food, app.oriri.food, plus.oriri.food (the oriri+ portal) and the oriri apps. We never sell your data.

Contact. For anything about your data, write to gdpr@oriri.food or support@oriri.food, or to our postal address. oriri has no data protection officer; gdpr@oriri.food is the contact point for privacy.

2. What we collect and why

We collect only what we need to run oriri. The legal basis is the contract with you (your account or membership), our legitimate interest, your consent, or a legal obligation.

Where we rely on legitimate interest, you can object at any time (section 9). Where we rely on consent, you can withdraw it at any time, for example by turning off location or push notifications.

3. Membership and payments

When you join oriri+, Cleeng B.V. (Amsterdam, the Netherlands) handles the payment as our payment provider and merchant of record, in its checkout shown inside oriri.

• What Cleeng processes: your name, email address, billing address, country (for VAT), phone number if you give it, masked payment details, IP address, device data and transaction history. For a business, also the company name, address and VAT number, which we pass to Cleeng for the receipt.
• Cleeng's role: for payment, tax, compliance and fraud checks, Cleeng is an independent controller under its own privacy policy. For your subscription page, Cleeng is our processor under a data processing agreement.
• What we receive: your email address, membership type, status, start, renewal and cancellation dates, and Cleeng's references for your customer and subscription. We never see or store your card details.
• Where: Cleeng stores this data in the Netherlands. Some of Cleeng's own suppliers are outside the EU; those transfers rely on the EU standard contractual clauses or the EU-US Data Privacy Framework, as Cleeng's privacy policy explains. If we change payment provider, we update this section and tell members first.

4. Who sees or receives your data

Other people on oriri.

• Who can see your profile and activity depends on your type of profile and on membership, as the app shows. Business profiles and stories are public; professional profiles and careers are not. As a foodie, nothing about you is public: your profile, lists and activity are visible only to the people you share them with.
• Other professionals on oriri can find your name, title, speciality and place; member professionals can open your profile and career. A business sees them only when you apply to its job.
• Your connections show on your profile only when both of you switch "Show my connections" on.
• Who you follow is private. Lists you share in a group are visible to that group.
• Messages, connection requests, partner requests and prospect requests go to the recipient only.
• When you apply for a job, the business you apply to sees your application, with your profile and career, and handles it under its own responsibility.
• A business sees the experience a professional adds at that business, so it can confirm it.
• Our staff can open your account to help you; your conversations stay closed to them, and every access is logged.

Our suppliers and services. These companies and services receive data so oriri can work. Our processors act only on our instructions, under a data processing agreement. Cleeng (section 3), Google Maps, YouTube and the European Commission's VIES handle data under their own terms.

Others. We share data with authorities only when the law requires it, and with a company that takes over oriri, after telling you.

5. Where your data is stored

We store your data, including photos and videos, in the EU. Some services process data outside the EU:

• SMS login codes, through Sinch's platform in the United States;
• push notifications, through Google and Apple;
• maps and videos, through Google Maps and YouTube, when a map or video loads;
• some of Cleeng's suppliers (section 3).

For every transfer outside the EU we rely on an adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or the EU standard contractual clauses. You can ask us for a copy of these safeguards at gdpr@oriri.food.

6. AI features and translation

AI suggestions. We use Anthropic's Claude models, run through Amazon Bedrock in the EU, to suggest texts (for example a profile description or a story draft), to describe the images you upload for screen readers, to read an event page you give us, to suggest businesses in prospect search, and to read your public website. We send only the information needed for the task, with safeguards against harmful output. Under the provider's terms, this data is not used to train its models. You can edit every suggestion, before or after it is published. AI is never used to make decisions about you with legal or similarly significant effects.

Translation. We translate business profiles, articles and events automatically into oriri's languages with Google Cloud Translation, which processes them in the EU. You can switch to the original text at any time. Messages are never translated.

7. Cookies and analytics

• Essential only. oriri uses only what it needs to work, such as keeping you logged in. These need no consent.
• Statistics without cookies. Our usage statistics run in cookieless mode: they place no cookies or similar trackers on your device.
• Small settings. The apps keep small settings in your browser, such as a notice you dismissed; they identify nobody.
• Videos and maps. Videos in articles load from YouTube in privacy-enhanced mode, and maps load from Google.
• No advertising trackers. oriri has no advertising cookies and no paid ads.
• Checkout. Cleeng's checkout, shown inside oriri when you join oriri+, may use its own cookies; see Cleeng's cookie policy.

If we ever add cookies that need consent, we will ask for it first and update this section.

8. How long we keep your data

After these periods we delete or anonymise the data.

9. Your rights

Under the GDPR you can ask us to:

• give you access to your data and a copy of it;
• correct data that is wrong;
• delete your data;
• restrict how we use it;
• give you your data in a format you can take elsewhere;
• stop using it where we rely on legitimate interest (you can object at any time, and always to news about oriri);
• stop using it where we rely on consent (you can withdraw consent at any time; this does not affect what we did before).

Write to gdpr@oriri.food or support@oriri.food. We answer within one month, and may ask you to confirm your identity. If you are not satisfied, you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données, Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be) or to the authority in your own EU country.

10. Security, children and changes

Security. We protect your data with technical and organisational measures that suit oriri, such as encryption and two-factor authentication for administrative access. No online service can rule out every risk; if a breach puts you at high risk, we tell you without undue delay.

Children. oriri is not meant for children under 16. We do not knowingly collect their data; if we learn that we have, we delete it.

Changes. We update this policy when oriri, our suppliers or the law change, record each change below, and email the people affected by a major change.

Update log