1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through our website, online forms, communications, service inquiries, marketing activities, and other interactions with Orobi.

Information collected while providing contracted cybersecurity, managed IT, consulting, AI, compliance, or other professional services may also be governed by applicable agreements, statements of work, data processing agreements, or other contractual terms.

2. Information We May Collect

Information You Provide Directly

Depending on how you interact with Orobi, you may provide information such as:

• Contact information, such as your name, email address, telephone number, and mailing address.
• Business information, such as your company name, job title, number of employees, industry, and business contact details.
• Service inquiry information, including information about cybersecurity, IT, Microsoft 365, AI, website, compliance, or technology needs.
• Support information, including information you voluntarily provide when requesting assistance or communicating with our team.
• Assessment information, such as answers submitted through cybersecurity questionnaires, risk assessments, consultation forms, or similar tools.
• Payment and transaction information, if you purchase products or services through our website. Payment information may be processed by third-party payment processors rather than stored directly by Orobi.
• Communication preferences, including email or SMS preferences where applicable.

Information Collected Automatically

When you use our website, certain technical information may automatically be collected through cookies, log files, analytics tools, and similar technologies. This information may include:

• IP address
• Browser type and version
• Device type and operating system
• Pages viewed
• Referring website or source
• Date and time of visits
• General geographic information derived from IP address
• Interactions with website features

Information From Third Parties

We may receive information from vendors and service providers that support our website and business operations, including website hosting providers, Shopify, payment processors, analytics services, marketing platforms, customer relationship management tools, communications providers, and security providers.

3. How We Use Personal Information

We may use personal information for purposes including:

• Responding to inquiries and consultation requests
• Providing cybersecurity, IT, AI, website, and related services
• Preparing proposals, assessments, reports, or recommendations
• Providing customer support
• Managing our relationship with customers and prospects
• Processing transactions and payments
• Scheduling meetings or service activities
• Improving our website, services, and customer experience
• Monitoring and protecting the security of our systems
• Detecting fraud, abuse, unauthorized activity, or security threats
• Sending administrative or service-related communications
• Sending marketing communications where permitted by law
• Complying with legal and regulatory requirements
• Enforcing agreements and protecting our legal rights

4. Email and SMS Communications

If you provide your email address or telephone number, we may use that information to communicate with you regarding inquiries, services, appointments, support requests, transactions, or other interactions with Orobi.

Where required, promotional email or SMS communications will only be sent with appropriate consent. You may opt out of promotional emails by using the unsubscribe mechanism included in those communications.

If you consent to receive SMS communications, you may withdraw that consent according to the instructions provided in the message or by contacting Orobi. Mobile telephone numbers and SMS opt-in consent information are not shared with unaffiliated third parties for their independent marketing or promotional purposes.

Opting out of promotional communications does not prevent us from sending non-promotional communications related to active services, support, security matters, transactions, or other necessary business communications.

5. Cookies and Similar Technologies

Orobi and service providers supporting our website may use cookies, pixels, analytics technologies, and similar tools to operate the website, remember preferences, understand website usage, improve performance, and measure marketing effectiveness.

Our website is powered in part by Shopify, which may use cookies and similar technologies in connection with its platform.

Most web browsers allow you to manage, block, or delete cookies through browser settings. Disabling certain cookies may affect the availability or functionality of portions of the website.

6. How We May Disclose Personal Information

We may disclose personal information when reasonably necessary to operate our business or provide requested services. Recipients may include:

• Vendors and service providers that support website hosting, cloud services, payment processing, communications, analytics, customer support, security, or other business functions.
• Professional advisers such as attorneys, accountants, insurers, or consultants when appropriate.
• Business partners or subcontractors when necessary to provide an agreed service and subject to appropriate obligations.
• Government agencies, regulators, courts, law enforcement, or other parties when disclosure is required by law or reasonably necessary to protect rights, security, or safety.
• Parties involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction.
• Other parties when you direct us to disclose information or otherwise provide consent.

We do not use sensitive personal information for the purpose of inferring characteristics about individuals.

7. Cybersecurity, IT and AI Service Information

Customers may provide information about their technology environment when requesting cybersecurity, managed IT, Microsoft 365, AI automation, security assessments, compliance support, website services, or other professional services.

Such information may include technical configurations, business processes, software or hardware information, security findings, account identifiers, logs, documentation, or other information necessary to provide the requested service.

Orobi uses information provided during professional engagements for legitimate service delivery, security, support, contractual, and legal purposes. Additional confidentiality, security, retention, or processing requirements may be addressed through applicable contracts or statements of work.

For AI-related services, Orobi may assist customers with AI agents, automation, AI security, workflow design, or secure AI adoption. The specific handling of customer information used in an AI implementation depends on the systems, vendors, permissions, data sources, and contractual scope involved in that engagement.

8. Security of Personal Information

Orobi uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

However, no method of transmission, storage, or security technology can guarantee absolute security. Users should avoid sending highly sensitive information through unsecured communication methods.

9. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purpose for which it was collected, provide services, maintain business records, comply with legal or regulatory obligations, resolve disputes, enforce agreements, and protect our legitimate business interests.

Retention periods may vary depending on the nature of the information, the relationship with the individual or organization, contractual requirements, and applicable law.

10. Your Privacy Rights

Depending on where you live and applicable law, you may have certain rights concerning your personal information. These rights may include the ability to:

• Request access to personal information we maintain about you
• Request correction of inaccurate information
• Request deletion of certain personal information
• Request a portable copy of certain information
• Withdraw consent where processing is based on consent
• Opt out of certain marketing communications
• Request information regarding certain disclosures of personal information
• Appeal certain privacy-request decisions where applicable law provides that right

Privacy rights are not absolute and may be subject to exceptions or verification requirements under applicable law.

To submit a privacy request, contact us using the information provided below. We may need to verify your identity before completing a request.

Orobi will not unlawfully discriminate against individuals for exercising privacy rights available under applicable law.

11. Children's Privacy

Orobi's website and commercial services are not directed toward children under the age of 13, and we do not knowingly collect personal information directly from children under 13 through the website.

If you believe a child has provided personal information to us without appropriate authorization, please contact us so we can review the matter.

12. Third-Party Websites and Services

Our website may contain links to third-party websites, platforms, social media services, software providers, or other external resources. Orobi does not control the privacy practices of unaffiliated third parties.

We encourage users to review the privacy policies and terms of any third-party service they choose to use.

13. International Users

Orobi is based in the United States. If you access our website or communicate with us from outside the United States, information may be transferred to, processed in, or stored in the United States or other jurisdictions where our service providers operate.

Where applicable law requires specific safeguards for international transfers, appropriate transfer mechanisms may be used.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, technology, legal requirements, or business operations.

When changes are made, we will update the "Last updated" date shown at the top of this page.