The data controller responsible for your personal data is ORMELIA, located at: To be completed after company incorporation. You can contact us at privacy@ormelia.app.
The registered address must be completed after company incorporation.
2. Data Protection Officer
ORMELIA has not appointed a Data Protection Officer (DPO) at this time. All data protection inquiries can be directed to privacy@ormelia.app.
3. Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
Right of access (Article 15)You can request confirmation that your data is being processed and a copy of the data. You can also export your data directly from the Settings page in JSON or CSV format.
Right to rectification (Article 16)You can correct inaccurate or incomplete personal data. Most data can be updated directly from your account settings.
Right to erasure (Article 17)You can request the deletion of your account and all associated data. You can do this directly from the Settings page by typing "DELETE" to confirm. This action is permanent and cannot be undone.
Right to data portability (Article 20)You can receive your data in a structured, commonly used, and machine-readable format. You can export your data in JSON or CSV format from the Settings page.
Right to object (Article 21)You can object to the processing of your personal data for direct marketing or based on legitimate interests. Contact us to exercise this right.
Right to restrict processing (Article 18)You can request that we restrict the processing of your data in certain circumstances, such as when you contest the accuracy of the data. Contact us to exercise this right.
Right to withdraw consent (Article 7)Where processing is based on your consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
Right to lodge a complaint (Article 77)You have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.
4. How to Exercise Your Rights
You can exercise most of your rights directly from the ORMELIA application: privacy@ormelia.app.
Data export: Go to Settings → Export Data and download your data in JSON or CSV format.
Account deletion: Go to Settings → Security → Delete my account and type "DELETE" to confirm.
Data correction: Go to Settings → Profile and update your information.
For all other requests (objection, restriction, withdrawal of consent), contact us at
5. Data We Process
We process the following categories of personal data:
Identity data: email address, name, preferred language, country, user category.
Content data: documents, receipts, subscriptions, alerts, and uploaded files.
Usage data: insight history, advice memory, habit and brief state.
Payment data: Stripe customer ID, subscription ID, billing status (no card details).
6. Legal Basis for Processing
We process your data based on the following legal grounds:
Contract performance: providing the ORMELIA service you requested, including document storage, alerts, and AI features.
Consent: for optional features like privacy-friendly analytics.
Legal obligation: complying with applicable laws and regulations.
Legitimate interests: improving the service, ensuring security, and preventing fraud.
7. Data Retention
We retain your data for as long as your account is active. When you delete your account, all your data is permanently erased immediately, there is no 30-day grace period. We may retain limited data if required by law.
8. Data Sharing
We share your data with the following sub-processors:
Hosting and database provider: stores your account and vault data.
AI provider: processes your vault data transactionally for insights and extractions.
Stripe: processes payments and manages subscriptions.
ORMELIA uses AI to generate recommendations, insights, and simulations. These are advisory and do not produce legal effects or significantly affect you. All AI-generated recommendations can be ignored, you remain in full control of your decisions. No fully automated decision-making with legal or significant effects is performed.
10. International Data Transfers
Your data may be processed by our sub-processors in countries outside the European Economic Area. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with GDPR.
11. Contact
To exercise your rights or for any data protection inquiry, contact us at privacy@ormelia.app.