Privacy Policy
OrNsoft Corporation 10800 Biscayne Blvd, Miami, Florida 33161, USA
Last updated: 01/01/2026 Effective date: 01/01/2026
1. Introduction
OrNsoft Corporation (“OrNsoft”, “we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.
This policy applies to:
- Visitors to our websites, including ornsoft.com and our product sites.
- People who contact us, request information, or receive our communications.
- Clients and prospective clients, and the individuals who act on their behalf.
- Users of our products and services where OrNsoft acts as the controller of the data.
This policy does not replace any separate agreement you have signed with us. Where you have a signed contract or Data Processing Agreement, that document governs the specific processing it describes.
2. Controller and processor roles
It is important to understand the two different roles OrNsoft can have.
When OrNsoft is the controller. For our own websites, marketing, sales, billing, and internal operations, OrNsoft decides why and how personal information is processed. In those cases OrNsoft is the data controller, and this Privacy Policy applies.
When OrNsoft is the processor. Many of our products, including Kantum, Ceertia, WitCall, Clairy AI, and AdminCore, process personal information on behalf of our business clients. In those cases the client is the controller, OrNsoft is the processor, and we act only on the client’s documented instructions. The client’s own privacy policy governs that data. Our handling of it is set out in a separate Data Processing Agreement (DPA) with that client, not in this policy.
If you are an end user of a service operated by one of our clients, please contact that client to exercise your rights. We will assist our client as their processor.
3. Information we collect
We collect the following categories of personal information when we act as controller.
Information you provide to us.
- Identity and contact details such as name, company, job title, email address, postal address, and phone number.
- Account information when you register for an account or a portal.
- Billing and payment information needed to process orders and invoices.
- The content of messages, support tickets, and other communications you send us.
Information we collect automatically.
- Technical data such as IP address, browser type and version, device information, and operating system.
- Usage data such as pages visited, time spent, referring pages, and the date and time of your visit.
- Cookies and similar technologies, as described in Section 7.
Information from third parties.
- Business contact data from public sources and lead providers, where permitted by law.
- Payment confirmation from our payment processors.
We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, please contact us so we can delete it.
4. How we use your information and legal bases
We use personal information for the purposes below. For users in the European Economic Area, the United Kingdom, and Switzerland, we also state the legal basis under the GDPR.
| Purpose | Legal basis (GDPR) |
|---|---|
| To provide, operate, and support our services | Performance of a contract |
| To respond to your inquiries and support requests | Performance of a contract, or our legitimate interests |
| To process orders, invoices, and payments | Performance of a contract, and legal obligation |
| To send service and account communications | Performance of a contract |
| To send marketing communications | Consent, or our legitimate interests where permitted |
| To improve our website, products, and security | Our legitimate interests |
| To comply with legal, tax, and accounting obligations | Legal obligation |
| To establish, exercise, or defend legal claims | Our legitimate interests, or legal obligation |
Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may object, as described in Section 9.
We do not sell your personal information.
5. SMS Communications
If you choose to opt in to SMS communications from OrNsoft Corporation, we may use your mobile phone number to send messages related to your inquiry, consultation request, demo request, support request, account communication, or partner application.
Message frequency varies and may be up to 10 messages per month. Message and data rates may apply. You may opt out at any time by replying STOP, or request help by replying HELP.
OrNsoft does not sell, rent, trade, or share mobile phone numbers, SMS opt-in information, or SMS consent with third parties or affiliates for their marketing or promotional purposes. SMS-related information may be shared only with service providers who help us deliver messages on OrNsoft’s behalf and who are authorized to use that information only for that purpose.
6. How we share your information
We share personal information only as needed and only with the following types of recipients.
- Service providers and sub-processors who help us run our business, such as hosting, payment processing, email delivery, analytics, and customer support tools. They may process data only on our instructions. A current list of sub-processors is available on request at Privacy@OrNsoft.com.
- Cloud and infrastructure providers, including Amazon Web Services (AWS), Google Cloud, and Hostinger.
- Professional advisers such as accountants, auditors, and lawyers, where needed.
- Authorities and third parties where we are required by law, or where we have a good faith belief that disclosure is necessary to comply with the law, enforce our agreements, or protect the rights, safety, or property of OrNsoft, our users, or the public.
- Successors in the event of a merger, acquisition, or sale of assets, subject to this policy.
We require all service providers to protect personal information and to use it only for the purposes we specify.
7. International transfers
OrNsoft is based in the United States. If you are located in the European Economic Area, the United Kingdom, or Switzerland, your personal information may be transferred to and processed in the United States or other countries that may not provide the same level of protection as your home country.
When we transfer personal information out of these regions, we rely on appropriate safeguards, including:
- The European Commission’s Standard Contractual Clauses (SCCs), and the UK Addendum or UK International Data Transfer Agreement where applicable.
- Any additional measures required to protect the data.
You can request a copy of the relevant safeguard by contacting us at Privacy-EU@ornsoft.com.
8. Cookies and similar technologies
We use cookies and similar technologies to operate our websites, remember your preferences, understand how our sites are used, and support security.
We use the following categories:
- Strictly necessary cookies, required for the site to function.
- Functional cookies, which remember your choices.
- Analytics cookies, which help us understand usage. We use Google Analytics.
- Marketing cookies. We use the Google Ads tag (sometimes called the Google pixel) for advertising measurement and remarketing.
Where required by law, we ask for your consent before placing non-essential cookies, and you can manage your preferences through our cookie banner or your browser settings. Blocking some cookies may affect how the site works.
[If you deploy a consent management tool, name it here and link to the cookie settings.]
9. Data retention
We keep personal information only as long as needed for the purposes described in this policy, and then we delete or anonymize it.
Retention periods depend on the type of data and the reason we hold it. As general guidance:
- Account and contract data: for the life of the relationship and for 2 years afterward.
- Billing and tax records: for the period required by applicable law, typically 7 years.
- Support communications: for 1 year.
- Marketing data: until you unsubscribe or object, and for a short period afterward.
10. Your rights
European Economic Area, United Kingdom, and Switzerland
If the GDPR or UK GDPR applies to you, you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Erase your information in certain circumstances.
- Restrict or object to our processing.
- Receive your information in a portable, machine readable format.
- Withdraw consent at any time, without affecting prior processing.
- Lodge a complaint with a supervisory authority.
The relevant authority is usually the one in the country of your residence, your place of work, or where you believe an infringement occurred.
Some rights are limited. For example, we may keep data where we have a legal obligation to do so, in which case we may retain it even after you withdraw consent.
United States residents
Depending on your state, you may have the right to know what personal information we collect, to access or delete it, to correct it, and to opt out of certain sharing. We do not sell personal information, and we do not share it for cross context behavioral advertising as those terms are defined under applicable US state law. We will not discriminate against you for exercising your rights.
How to exercise your rights
To exercise any of these rights, contact us at Privacy-EU@ornsoft.com if you are in the EEA, UK, or Switzerland, or Privacy@OrNsoft.com otherwise. We may need to verify your identity before we respond. We will respond within the time required by applicable law.
If you are an end user of a service operated by one of our clients, please direct your request to that client, who is the controller of your data.
11. Data security
We maintain technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, and alteration. OrNsoft holds ISO 9001 and ISO 27001 certifications, and our security program reflects those standards.
No method of transmission or storage is completely secure. We cannot guarantee absolute security. Where you have a signed services agreement with us, the security responsibilities of each party are set out in that agreement and any related Data Processing Agreement.
12. Privacy contact and EU representative
Privacy contact. Questions about this policy or your personal information can be directed to our privacy contact:
OrNsoft Corporation 10800 Biscayne Blvd. #988, Miami, Florida 33161, USA Email: Privacy@OrNsoft.com
EU representative. Where Article 27 of the GDPR applies, OrNsoft will appoint a representative established in the European Union. For matters concerning EU personal data, you can also reach us at Privacy-EU@ornsoft.com. [Insert the name and EU address of the appointed representative here. This must be a person or company located in the EU. Until appointed, leave this paragraph as a statement of intent, and confirm with your counsel whether Article 27 applies to your activities.]
13. Third party links
Our websites may contain links to other sites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. If we make material changes, we will provide a more prominent notice where required. Please review this page periodically.
15. Contact us
If you have questions or concerns about this Privacy Policy or how we handle your personal information, contact us at:
OrNsoft Corporation 10800 Biscayne Blvd. #988 Miami, Florida 33161, USA Email: Privacy@OrNsoft.com
This Privacy Policy is provided for general information and does not constitute legal advice.
