Privacy, without the fog.

Oryxa AI Private Limited (“Oryxa”, “we”, “us”, or “our”) provides an AI coordination service that helps people remember commitments, coordinate follow-ups, prepare updates, and work with connected tools.

This policy applies to our marketing website at oryxa.in, the Oryxa product at theweirdlyodd.com, our applications, demo and inquiry forms, customer support, and other services that link to it. It does not govern third-party services that you choose to connect to Oryxa; their own privacy terms continue to apply.

For account, website, and business-contact data, Oryxa generally acts as the entity deciding why and how the data is used. For workspace content processed on behalf of an organization, the organization is generally the controller or data fiduciary and Oryxa acts as its processor or data processor.

Information you provide

• Account and profile details, such as name, work email, role, organization, and authentication information.
• Demo requests, support messages, feedback, and other communications with Oryxa.
• Workspace content, including tasks, prompts, messages, commitments, updates, documents, and instructions submitted to the service.
• Configuration choices, permissions, team membership, and integration settings.

Information generated through use

• Service activity, agent runs, task status, approvals, audit events, and feature interactions.
• Technical data such as IP address, browser type, device information, timestamps, diagnostic logs, and security events.
• Derived context needed to organize work, such as relationships between commitments, people, projects, and connected tools.

Information from connected services

If you connect a third-party account, Oryxa receives only the data and permissions made available through that connection and authorized by you or your organization. The scope depends on the integration and can be revoked through the relevant account or workspace settings.

We use personal data to:

• provide, maintain, personalize, and improve the Oryxa service;
• authenticate users, administer workspaces, and honor configured permissions;
• carry out requested agent actions, prepare drafts, coordinate tasks, and preserve relevant work context;
• respond to inquiries, provide support, and communicate service or policy changes;
• detect misuse, protect accounts, investigate security events, and maintain service reliability;
• meet legal obligations and enforce our agreements; and
• analyze aggregated or de-identified usage to understand and improve product performance.

Where a legal basis is required, we rely on performance of a contract, legitimate interests in operating and securing the service, consent where requested, and compliance with law. We do not sell personal data or use customer workspace content for targeted advertising.

Oryxa uses AI systems to interpret instructions, organize context, draft communications, and coordinate requested work. AI-generated material can be incomplete or incorrect. Customers are responsible for reviewing important messages, commitments, and decisions before relying on or sending them.

We design the service so organizations can scope access, require approval for sensitive actions, and review activity. We do not represent Oryxa as a substitute for professional, legal, medical, financial, employment, or other high-impact human judgment.

We disclose personal data only as needed to operate the service or when legally required, including to:

• service providers and subprocessors supporting infrastructure, authentication, communications, integrations, security, and AI inference;
• connected services when a user or organization directs Oryxa to exchange data with them;
• workspace administrators and authorized members according to organization settings;
• professional advisers, auditors, insurers, or transaction counterparties subject to appropriate duties; and
• government authorities or other parties when required by law or necessary to protect rights, safety, and service integrity.

Our current provider categories and conditional infrastructure options are described on the Subprocessors page.

We retain personal data only for as long as reasonably necessary for the purposes described here, to provide an active account, follow customer instructions, resolve disputes, secure the service, and meet legal obligations.

Retention depends on the data type and workspace configuration. Customer content is deleted or returned following termination as provided in the applicable agreement and Data Processing Addendum, subject to limited backup cycles and legal preservation requirements. Aggregated or de-identified information may be retained where it can no longer reasonably identify an individual.

Oryxa and its providers may process data in countries other than the country where it was collected. Where required, we use contractual safeguards and other lawful transfer mechanisms intended to protect personal data across borders.

Customers with specific data-location requirements should address them in an order form or written enterprise agreement before providing regulated data.

Depending on your location and applicable law, you may request access to a summary or copy of personal data, correction, completion, erasure, restriction, objection, portability, withdrawal of consent, grievance redressal, or nomination of another person to exercise certain rights.

If your data belongs to a customer workspace, submit the request to that organization first. We assist customers in responding to valid requests. For data Oryxa controls directly, contact us with enough information to verify and process the request. We may retain information where law permits or requires it.

You may unsubscribe from promotional email through the message itself. Essential service and security communications cannot be opted out of while an account remains active.

We use administrative, technical, and organizational safeguards proportionate to the service and data involved. No system is completely secure, and customers must also protect credentials, permissions, devices, and connected accounts.

Oryxa is a workplace service and is not directed to children. Users must be legally able to enter the applicable agreement and must not submit children’s personal data unless expressly agreed and lawfully authorized.

We may update this policy as the service or law changes. Material changes will be identified by a revised effective date and, where appropriate, additional notice.