Legal

Privacy Policy

Last updated: 21 July 2026

How DEHA GLOBAL PTE. LTD. collects, uses and protects your personal data when you use Oriene — under Singapore’s PDPA (2012) and, where applicable, the GDPR.

01

Introduction

This policy describes how DEHA GLOBAL PTE. LTD. (“we”) collects, uses and protects personal data when you use the Oriene service. We process data under Singapore’s PDPA (2012) and, where applicable, the GDPR for users in the EEA.

02

Data controller

DEHA GLOBAL PTE. LTD., 36 Robinson Road, #20-01, City House, Singapore 068877. Privacy / Data Protection Officer: moc.labolg-ahedobfsctd-272e88@ofni. For data in your Workspace managed by your organisation, that organisation may be the controller and we act as processor.

03

Data we collect

Account info (name, email, hashed password, avatar, preferences, 2FA); Your Content (documents, files, text you upload or sync via Connectors, plus derived data such as embeddings and search indexes); Conversation data (questions, AI answers, chat history, memory); Connector data (from third-party services you connect, within the scope you grant); Usage and technical data (logs, IP address, browser/device type, access times, events, billing info); Cookies (see §12).

04

How we use data

To (a) provide, operate and maintain the Service; (b) authenticate and secure accounts; (c) process Your Content with AI to deliver features you request; (d) process payments and credits; (e) provide support and Service communications; (f) improve, analyse and protect the Service (fraud/abuse prevention); (g) comply with legal obligations.

06

AI processing and sub-processors

To provide AI features we may share relevant Content with AI model/infrastructure providers acting as sub-processors, only to process on our instructions and under data-protection terms. A list of sub-processors is available on request at moc.labolg-ahedobfsctd-485ee4@ofni.

07

Sharing and disclosure

We do not sell personal data. We share only with: service providers/sub-processors (hosting, AI, payment, email); other members of your Workspace per your sharing settings; lawful requests by authorities; or in a merger/acquisition with equivalent safeguards.

08

International transfers

Your data may be processed in a country other than where you reside. For transfers outside your region we apply appropriate safeguards (e.g., EU Standard Contractual Clauses, or equivalent protection under PDPA).

09

Data retention

We retain personal data as long as needed to provide the Service and meet legal obligations. When you delete Content or your account, we delete or anonymise related data within a reasonable period, unless law requires longer retention.

10

Security

We apply reasonable technical and organisational measures (encryption in transit, access controls, per-Workspace data isolation). No method of transmission or storage is completely secure.

11

Your rights

Depending on applicable law (PDPA/GDPR): access, correct, delete, restrict or object to processing, data portability, withdraw consent, and lodge a complaint with the data-protection authority (in Singapore, the PDPC). Contact moc.labolg-ahedobfsctd-124bfc@ofni; we respond within statutory timelines.

12

Cookies and tracking

We use necessary cookies/local storage for login, sessions and preferences (language, theme), and may use analytics cookies. Manage cookies via your browser; disabling necessary cookies may affect the Service.

13

Children

The Service is not intended for children under the minimum age (13, or higher where local law requires). We do not knowingly collect children’s data; if found, we delete it.

14

Changes to this policy

We may update this Policy. For material changes we provide reasonable notice. The effective date above shows the latest update.

15

Contact

Privacy questions: moc.labolg-ahedobfsctd-8179d2@ofni – DEHA GLOBAL PTE. LTD., 36 Robinson Road, #20-01, City House, Singapore 068877.