Privacy Policy
Last updated October 25, 2026
This policy explains how Eren Menteşe (“we”) handles personal data when you visit our website or use Oran. We are the data controller for your account and store data.
What we collect
- Account data: your name, email address and password (stored hashed by our authentication provider).
- Store data you enter: store name and URL, platform, funnel numbers such as sessions, orders and revenue, site check answers and actions you track.
- Design partner applications: the details you submit through the form on our website.
- Billing data: handled by Paddle as Merchant of Record. We receive your subscription status, plan and a customer ID, never your full card details.
- Technical data: basic server logs (IP address, browser, timestamps) kept by our hosting providers for security.
How we use it
- To provide Oran: analyses, reports, benchmarks and your account (contract).
- To bill your subscription through Paddle (contract).
- To build anonymous sector benchmarks from conversion rates, if you leave this on (legitimate interest; you can opt out in Settings).
- To answer support requests and send service emails about your account (contract).
- To keep the service secure and prevent abuse (legitimate interest).
We don’t sell personal data, use advertising trackers or share your store data with other customers.
Who processes it
- Supabase — database and authentication, hosted in the EU (Frankfurt).
- Vercel — website and app hosting.
- Anthropic — generates text for AI features from the parts of your analysis those features use. It isn’t used to train their models under their commercial terms.
- Paddle — payments, invoicing and tax as Merchant of Record, under its own privacy policy.
Some providers process data outside your country, including in the United States, under standard contractual clauses or equivalent safeguards.
Cookies and storage
Our website uses no tracking cookies. The app stores your sign-in session in your browser’s local storage so you stay logged in. Paddle’s checkout sets cookies needed to process payments.
How long we keep it
We keep account and store data while your account exists. When you delete your account, we delete it within 30 days, except records we must keep by law. Anonymous benchmark contributions no longer identify you.
Your rights
Depending on where you live (for example under the GDPR, Türkiye’s KVKK or US state laws), you can ask to access, correct, export or delete your data, object to processing or withdraw consent. You can also download a full backup from Settings. To make a request, email eren@useoran.com. You may complain to your local data protection authority.
Children
Oran is a business tool and isn’t meant for anyone under 18.
Changes
If we change this policy in a meaningful way, we’ll update the date above and tell account holders by email.
Contact
Eren Menteşe · eren@useoran.com