Introduction

Welcome to Orta. Your comprehensive project management platform designed to support the dynamic needs of modern work environments. Our service not only streamlines workflows and enhances productivity by managing multiple workspaces and projects but also protects your valuable data. This Privacy Policy serves as an in-depth guide, outlining how we handle every aspect of your personal and business information with originality and the utmost care.

Scope and Applicability

This Privacy Policy applies to every user of the Orta platform, whether you are an individual, part of a team, or a large organization. It covers all interactions on our website, mobile applications, and any integrated tools or services provided by Orta. By accessing our platform, you agree to the data practices described herein.

Our Privacy Commitment

Orta’s approach to privacy is defined by our steadfast commitment to:

Transparency: Clearly outlining our data practices in an understandable format.
Security: Employing state-of-the-art technologies to protect your information.
User Empowerment: Giving you full control over your data.
Compliance: Abiding by all relevant data protection regulations and industry best practices.

Data Collection

To deliver a tailored and secure experience, Orta collects various categories of data:

4.1. Account Creation and Access Credentials
When you create an account on our platform, we gather key information, including your email address, first name, last name, and password. Alternatively, you have the option to register using your Google credentials. This information is vital for ensuring secure access and providing you with a personalized user experience.

4.2. Project and Workspace Creation
Upon successful completion of the registration process, you will be prompted to establish your workspace, with the option to select either the student or professional category. If you opt to create a workspace within the professional category, we will request the following information:

• ● Workspace name, industry type, team size, and job title.

We collect information related to your projects, tasks, deadlines, and workspace configurations. This data is essential for facilitating effective project tracking, fostering collaboration, and ensuring comprehensive management of your work environments.

4.3. Uploaded Documents and Media
Files you upload, including documents, spreadsheets, images, videos, and presentations, are stored on our secure servers. Access to these files is strictly controlled to ensure that only authorized users within your team or organization can view or modify them.

4.4. Usage and Interaction Logs
To improve our service, we automatically log information about your interactions with the platform. This includes IP addresses, browser and device details, timestamps, and other activity metrics that help us analyze usage trends and optimize performance.

4.5. Communication Records
Any correspondence between you and our support team—such as emails, chat logs, and feedback submissions—is collected to ensure effective customer support and to continually enhance our service offerings.

Utilization of Collected Data

The information we collect is integral to providing you with a secure, efficient, and customized project management experience:

5.1. Personalization and Workflow Optimization
Your data is used to create a tailored interface, including personalized dashboards, alerts, and workflow recommendations. This customization allows you to manage projects in a way that best suits your operational needs.

5.2. Service Enhancement and Feature Development
Analyzing data trends and user feedback helps us improve existing features and develop new tools. We continually refine our platform to enhance productivity and streamline project management processes.

5.3. Security, Compliance, and Risk Management
Data collection plays a key role in detecting and preventing unauthorized access or suspicious activities. This helps us maintain compliance with legal standards and safeguard both your information and our systems against potential risks.

Payment and Subscription

6.1.  Definitions

• ● “Account”: A registered profile created by a user that enables access to Orta’s subscription-based services.
  
• ● “Auto-renewal”: The process by which your subscription automatically renews at the end of each billing cycle unless you cancel before the renewal date.
  
• ● “Billing Cycle”: The recurring period (e.g., monthly, yearly) in which the subscription fee is charged and services are rendered.
  
• ● “Fees”: All amounts payable by the user for accessing Orta’s services, including subscription fees and applicable taxes.
  
• ● “Invoice”: A document generated after a successful payment that details the charges incurred during the billing period.
  
• ● “Payment Processing”: The secure handling of payment transactions, which is performed by Razorpay in compliance with PCI-DSS standards.
  
• ● “Subscription”: A recurring service plan that provides access to Orta’s features for a specified period under the agreed-upon payment terms.
  
• ● “Trial Period”: A designated period during which new users can access core features at no charge; after this period, the workspace must be upgraded to continue usage.
  
• ● “Razorpay”: The third-party payment processor responsible for securely processing all payments on behalf of Orta.
  
• ● “User” or “You”: The individual or entity that registers for and utilizes Orta’s services.
•  

6.2. Information We Collect

When you make a subscription payment, we collect and process the following information:

• Billing Address: Including Organization Name, Full Name, Country, Address, City, State, Postal Code, and GST IN ID (if applicable).
  
• Subscription Plan Details: Plan Name, Price, Billing Cycle, Validity period, and Upgrade/Downgrade Status.
  
• Payment Confirmation Details: Processed securely via Razorpay, ensuring full compliance with PCI-DSS standards.

Note: We do not store sensitive payment details (e.g., card numbers, CVV, or bank details); all such information is securely handled by Razorpay.

6.3. How We Use Your Information

We use the collected billing data to:

• ● Process subscription payments and renewals.
  
• ● Generate and send invoices.
  
• ● Notify you of payment confirmations, failures, or pending statuses.
  
• ● Support subscription upgrades and cancellations
  
• ● Assist with billing-related queries via our support channels.
•  

6.4. Sharing of Information

We do not sell, rent, or share your personal billing information with third parties except as follows:

• ● With Razorpay for secure payment processing.
• ● With legal authorities as required by law, or to prevent fraud.
• ● With our support team to assist with and resolve billing issues.
•  

6.5. Payment Gateway Protection

We prioritize the security of your financial transactions. All payments are processed through Razorpay, a trusted and secure payment gateway that employs advanced security measures to protect your information.

• PCI DSS Compliance: Razorpay adheres to the Payment Card Industry Data Security Standard (PCI DSS), ensuring robust protection for cardholder data. ​Razorpay
• Advanced Encryption: All transactions are encrypted using industry-standard protocols like TLS and AES-128-bit encryption, safeguarding your data during transmission. ​Razorpay+1Razorpay+1
• Tokenization: Sensitive payment information is replaced with unique tokens, minimizing the risk of data exposure. ​Razorpay
• Fraud Detection: Razorpay implements real-time fraud detection mechanisms, including monitoring of payment patterns and geographical anomalies, to prevent unauthorized transactions. ​Razorpay
• Secure Authentication: Additional security layers, such as OTP-based verification, are used to authenticate transactions and protect against unauthorized access.
•  

Your billing details are stored securely within our system strictly for invoice generation and regulatory compliance.

By leveraging Razorpay’s secure infrastructure, we ensure that your debit and credit card information remains protected throughout the transaction process.

6.6 User Rights & Choices

You have the right to:

• ● Edit your billing address via the Billing section on your account.
• ● Request corrections to any invoices by contacting our support team.
• ● Cancel your subscription anytime by following the cancellation process outlined below in the Terms & Conditions.

Data Sharing and Third-Party Access

Your data is shared only under strict circumstances to ensure its confidentiality and integrity:

7.1. Collaboration with Trusted Partners
We work with reputable third-party vendors for services such as payment processing, data storage, and analytics. Each partner is required to uphold rigorous data protection standards equivalent to our own.

7.2. Legal and Regulatory Disclosures
In compliance with applicable laws, we may disclose parts of your data when legally mandated, such as in response to court orders or regulatory investigations. Such disclosures are minimal and strictly controlled.

7.3. Internal Data Sharing Within Your Organization
Data within your account may be shared among team members to facilitate collaboration. Access is managed by the role-based permissions you define within your workspace.

Data Security Measures

To ensure your data is protected, Orta employs multiple layers of security protocols:

8.1. Encryption and Secure Data Handling
All sensitive information, including login credentials and payment details, is encrypted during transmission (using SSL/TLS) and while stored on our servers. This prevents unauthorized access and ensures data integrity.

8.2. Access Controls and Authentication Mechanisms
We enforce strict access control measures, including multi-factor authentication (MFA) and role-based permissions, to ensure that only authorized personnel can access your data.

8.3. Continuous Monitoring and Incident Response
Our security systems continuously monitor for irregular activities. In the event of a security breach, a dedicated incident response team is activated immediately to mitigate risks and notify affected users promptly.

Data Retention and Secure Disposal

We retain your data only for as long as necessary to provide our services and meet legal obligations. Once your data is no longer needed, we employ secure deletion and anonymization practices to prevent any potential misuse or unauthorized recovery. practices to prevent any potential misuse or unauthorized recovery.

User Rights and Data Control

Orta is committed to giving you complete control over your personal and project data. You have the right to:

Access Your Data: Request detailed reports of the information we hold about you.
Amend Inaccuracies: Update or correct any data that is incorrect or outdated.
Data Portability: Obtain your data in a format that facilitates seamless transfer to another service if you choose.
Delete Your Data: Request the permanent deletion of your account and all associated information.
Opt Out of Communications:  Adjust your preferences for receiving non-essential notifications and marketing materials.

Modifications and Policy Updates

We continually review and update our Privacy Policy to reflect changes in technology, regulations, and our service offerings. Should significant updates be made, we will inform you via our platform or through direct communication. Your continued use of Orta signifies your acceptance of the updated policies.

Contact Information

For any questions, concerns, or requests related to this Privacy Policy or our data practices, please reach out to us using the contact details below:

Company name: Hamly GlobalTech Private Limited.

Email: support@ortaapp.com

By using Orta, you acknowledge that you have read, understood, and agreed to the practices outlined in this Privacy Policy. We remain dedicated to ensuring that your project management experience is secure, efficient, and fully aligned with the highest standards of data privacy and protection.

Thank you for choosing Orta as your trusted partner in managing your projects and workflows.