Privacy Policy
Last updated October 28, 2026
This policy explains what Oriel (“we”) collects when you use buildoriel.com and the sites hosted on it, why we collect it, and the choices you have.
What we collect
- Account data: your email address and, if you sign in with Google, your basic Google profile.
- Wallet data: the public wallet address you verify by signing a message, and the on-chain transactions you send to Oriel (payments, staking, claims). Blockchain data is public by nature.
- Project data: your chat messages with the agent, the files it creates, and the sites you publish.
- Usage data: credit balance and history, AI usage per request (model, token counts, cost), and basic server logs. We use Vercel Web Analytics and Speed Insights (cookieless, aggregate page views and performance) and keep error reports (message, page, browser) to fix bugs.
- Connector data: when you connect GitHub, Vercel, Netlify, Supabase, Google Drive, or Cloudflare, we store access tokens encrypted (AES-256-GCM) and use them only for the actions you start.
- Abuse reports: the report you submit, an optional email, and a salted hash of your IP address used only to limit spam.
How we use it
- To run the service: build and host your projects, charge and refill credits, evaluate tiers, and pay revenue share and creator royalties.
- To prevent abuse: one wallet per Free account, rate limits, and reviewing reported sites.
- To improve Oriel using aggregate usage numbers. We do not sell your personal data and we do not use it for advertising.
AI processing
Your requests and project files are sent to our AI providers (Anthropic models, accessed directly or through OpenRouter, and an image generation provider when images are created) to produce results. They process this data on our behalf under their own terms.
Who we share data with
Only the service providers we need to operate: Supabase (database, authentication, storage), Vercel (application and site hosting, domains), our AI providers, Alchemy (blockchain access), and the third-party services you choose to connect. We may disclose data if the law requires it or to protect users from harm.
Cookies
We use essential cookies only: your sign-in session, a 10-minute cookie that protects connector sign-ins, and a 30-day cookie that remembers a referral link you followed. No advertising or cross-site tracking cookies.
Retention and deletion
We keep your data while your account is active. You can disconnect connectors at any time, which deletes their tokens. To delete your account and projects, email us. Payment and credit records may be kept as long as needed for accounting. Data already written to a public blockchain cannot be deleted.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to some processing. Email us and we will respond within 30 days.
Children
Oriel is not for anyone under 18.
Changes
If we change this policy in a meaningful way, we will notify you in the app before the change takes effect.