Privacy Policy

Last Updated: August 17, 2026

Orrop (“Orrop,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you provide when you use our website, services, and related features.

This Privacy Policy explains what information we may collect, how we use it, when we may share it, how we protect it, and the choices and rights available to you.

By accessing or using Orrop at https://orrop.com and any related services, you acknowledge that you have read and understood this Privacy Policy.

Please read this Privacy Policy carefully. If you do not agree with the practices described here, please discontinue use of the Service.

1. Who We Are

Orrop is an AI discovery platform designed to help users discover, explore, search, and evaluate AI-powered tools and services.

Data Controller / Business Name: Orrop
Website: https://orrop.com
Privacy Contact: shipon@orrop.com

For privacy-related questions, requests, or concerns, you may contact us using the information provided above.

2. Information We Collect

We may collect information directly from you, automatically when you use the Service, and in some circumstances from third parties.

The information we collect depends on how you interact with Orrop.

2.1 Information You Provide Directly

When you create an account, submit information, contact us, purchase a service, submit a review, or otherwise interact with Orrop, we may collect information such as:

Account Information

Depending on the features you use, this may include:

• Name or display name
• Email address
• Username
• Password or authentication credentials
• Profile information
• Account preferences
• Saved tools, bookmarks, or similar account activity

We do not ask you to provide more personal information than is reasonably necessary for the relevant feature.

Reviews and User-Generated Content

If you submit a review, rating, comment, testimonial, tool suggestion, profile description, or other content, we may collect and store the information contained in that submission.

Some information you submit may be publicly visible depending on the feature and how the Service is designed.

Please avoid including sensitive personal information in public reviews, comments, or other publicly accessible areas of Orrop.

Communications

If you contact us, subscribe to communications, submit a support request, or otherwise communicate with us, we may collect:

• Your name
• Email address
• Message contents
• Attachments or information you choose to provide
• Information necessary to respond to your request
• Records of our communications with you

Newsletter Information

If you subscribe to an Orrop newsletter or other marketing communications, we may collect your email address and subscription preferences.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the relevant communication or by contacting us.

Business and Listing Information

If you submit an AI tool, company, product, service, sponsorship, advertisement, or other business-related listing to Orrop, we may collect information such as:

• Company or product name
• Website URL
• Business email address
• Description and marketing materials
• Logos and images
• Contact information
• Pricing or service information
• Information related to purchases or submissions
• Information you provide in connection with a listing or sponsorship

3. Information Collected Automatically

When you access or use Orrop, certain information may be collected automatically.

This may include:

• IP address
• Browser type and version
• Device type
• Operating system
• Language preferences
• General geographic information derived from IP address
• Referring website or page
• Pages visited
• Links clicked
• Search queries submitted through the Service
• Time spent on pages
• Dates and times of access
• Error information
• Performance and diagnostic information
• Other technical information generated through use of the Service

We may use this information to operate, maintain, secure, analyze, and improve Orrop.

4. Cookies and Similar Technologies

Orrop may use cookies, local storage, pixels, tags, scripts, and similar technologies.

These technologies may be used for purposes such as:

Essential Technologies

These technologies may be necessary for:

• Account authentication
• Security
• Session management
• Website functionality
• Preventing abuse
• Remembering certain preferences

Disabling essential technologies may affect the functionality of the Service.

Analytics

We may use analytics technologies to understand how visitors use Orrop, including which pages are visited, how users navigate the website, and whether certain features are working properly.

Preferences

We may use cookies or similar technologies to remember certain settings and preferences.

Advertising and Marketing

If Orrop uses advertising or marketing technologies, third-party providers may use cookies or similar technologies to measure advertising performance, provide advertising, or personalize advertising where permitted.

The specific technologies used by Orrop may change over time.

Where required by applicable law, we will provide appropriate choices or consent mechanisms for non-essential cookies and similar technologies.

5. How We Use Information

We may use information we collect for the following purposes:

Providing and Operating Orrop

We may use information to:

• Provide access to Orrop
• Create and manage accounts
• Authenticate users
• Process submissions
• Display listings
• Enable reviews and ratings
• Save preferences, bookmarks, or similar features
• Provide customer support
• Process transactions and service requests
• Communicate with users about their accounts or submissions

Improving Orrop

We may use information to:

• Understand how users interact with the Service
• Improve search and discovery
• Develop new features
• Troubleshoot technical issues
• Analyze usage patterns
• Improve website performance
• Test and evaluate functionality

Security and Fraud Prevention

We may use information to:

• Detect and prevent fraud
• Detect abuse or malicious activity
• Protect user accounts
• Protect our infrastructure
• Investigate suspicious activity
• Enforce our Terms of Service
• Maintain the integrity and security of Orrop

Communication

We may use contact information to:

• Respond to inquiries
• Provide support
• Send service-related communications
• Provide account notifications
• Send marketing communications where permitted
• Inform users about relevant changes or updates

You may opt out of certain marketing communications at any time.

Legal and Compliance Purposes

We may process information when necessary to:

• Comply with applicable laws
• Respond to lawful requests
• Protect our rights
• Protect users or other individuals
• Investigate potential violations
• Establish, exercise, or defend legal claims

6. Legal Bases for Processing

Where applicable privacy laws require a legal basis for processing personal information, we may rely on one or more of the following legal bases:

Performance of a Contract

We may process information when necessary to provide a service you requested or perform an agreement with you.

Legitimate Interests

We may process information where reasonably necessary for legitimate business interests, such as operating, securing, improving, and promoting Orrop, provided those interests are not overridden by applicable privacy rights.

Consent

In certain circumstances, we may process information based on your consent.

Where processing is based on consent, you may withdraw your consent where permitted by applicable law.

Legal Obligations

We may process information when necessary to comply with legal or regulatory obligations.

The appropriate legal basis depends on the specific circumstances of the processing.

7. How We Share Information

We do not disclose personal information indiscriminately. However, information may be shared in circumstances necessary to operate Orrop and provide its services.

Service Providers

We may share information with companies and service providers that help us operate Orrop.

These providers may assist with services such as:

• Website hosting
• Database management
• Authentication
• Email delivery
• Analytics
• Security
• Customer support
• Payment processing
• Infrastructure
• Content delivery
• Error monitoring
• Website performance

These providers may only access information as necessary to perform services for us, subject to applicable agreements and laws.

Payment Providers

If you purchase a paid service through Orrop, payment information may be processed by third-party payment providers.

We generally do not need to receive or store your complete payment card number ourselves when payment processing is handled by a third-party provider.

Payment providers may process your information according to their own privacy policies and terms.

Analytics Providers

We may use third-party analytics services to understand how users interact with the Service.

These providers may collect information about your device, browser, website activity, and interactions with Orrop.

Advertising Partners

If Orrop displays advertisements, advertising partners may receive or collect certain information needed to provide, measure, or personalize advertisements, subject to applicable law and user choices.

Business Transactions

If Orrop is involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar transaction, personal information may be transferred as part of that transaction.

Where required by law, appropriate notices will be provided.

Legal Requirements

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with applicable law
• Respond to legal process
• Respond to governmental requests
• Enforce agreements
• Investigate fraud or security issues
• Protect the rights, property, or safety of Orrop, our users, or others

8. Publicly Available Information

Some information submitted to Orrop may be publicly visible.

For example, depending on the functionality of the Service, information associated with:

• Reviews
• Ratings
• Tool listings
• Public profiles
• Comments
• Testimonials
• Business listings
• Other user-generated content

may be displayed publicly.

You should carefully consider what information you choose to publish through Orrop.

Do not submit sensitive personal information to publicly accessible areas of the Service.

9. Third-Party Websites and Services

Orrop may contain links to third-party websites, applications, tools, products, or services.

For example, an AI tool listed on Orrop may link to the tool provider's own website.

When you leave Orrop and access a third-party website or service, that third party's privacy policy and terms may apply.

We do not control and are not responsible for the privacy practices, security, content, or policies of third-party websites or services.

We encourage you to review the privacy policies of any third-party websites or services you use.

10. AI Tools and Third-Party Platforms

Orrop is an AI discovery platform and may contain listings, descriptions, reviews, links, or information relating to third-party AI services.

Orrop does not necessarily operate, control, or provide those third-party AI services.

When you choose to use an AI tool discovered through Orrop, information you provide directly to that third-party service may be collected and processed by that provider according to its own policies.

You should review the privacy policy and terms of any AI provider before submitting personal, confidential, financial, or sensitive information to that provider.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

• The nature of the information
• Why we collected it
• Whether your account remains active
• Legal or regulatory requirements
• Security and fraud-prevention needs
• Dispute resolution
• Enforcement of agreements
• Legitimate business requirements

When information is no longer reasonably necessary, we may delete, anonymize, or otherwise securely dispose of it.

12. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Depending on the nature of the information and the risks involved, these measures may include:

• Access controls
• Authentication mechanisms
• Encryption in transit
• Secure infrastructure
• Monitoring and logging
• Backup procedures
• Security updates
• Limited access to personal information

However, no method of transmitting or storing information over the internet is completely secure.

Accordingly, we cannot guarantee that personal information will be completely secure.

You are also responsible for maintaining the security of your account credentials and should notify us if you believe your account has been compromised.

The FTC likewise emphasizes that businesses should maintain appropriate security practices and ensure that privacy and security promises made to consumers match their actual practices.

13. International Data Transfers

Orrop may use service providers or infrastructure located in countries other than the country where you live.

As a result, your personal information may be transferred to and processed in countries that may have different data protection laws from your jurisdiction.

Where applicable law imposes requirements for international transfers, we intend to use appropriate safeguards required by that law.

14. Your Privacy Rights

Depending on where you live and which privacy laws apply to you, you may have certain rights regarding your personal information.

These rights may include:

• Right to know what personal information we collect and how it is used
• Right to access personal information
• Right to request correction of inaccurate information
• Right to request deletion of personal information
• Right to withdraw consent where processing is based on consent
• Right to object to certain processing
• Right to restrict certain processing
• Right to data portability
• Right to opt out of certain marketing communications
• Right to opt out of certain sale or sharing of personal information where applicable
• Right to lodge a complaint with an applicable data protection authority

Privacy rights vary depending on your jurisdiction and are subject to applicable legal exceptions.

For example, California law provides qualifying consumers with rights including access, deletion, correction, and certain opt-out rights, while GDPR-style regimes require notices addressing matters such as purposes, legal bases, retention, recipients, international transfers, and individual rights.

15. How to Exercise Your Privacy Rights

To submit a privacy request, contact us at:

Email: shipon@orrop.com

Please include enough information for us to understand your request.

Depending on the request and applicable law, we may need to verify your identity before completing the request.

We will handle valid requests within the time period required by applicable law.

We may refuse or limit a request where permitted or required by law, including where fulfilling the request would adversely affect the rights of others, interfere with legal obligations, or otherwise fall within a legal exception.

16. California Privacy Rights

If you are a California resident and the California Consumer Privacy Act (“CCPA”), as amended by applicable California privacy legislation, applies to our processing of your information, you may have additional rights.

These may include rights to:

• Know what categories of personal information we collect
• Know the purposes for which personal information is collected or used
• Know the categories of sources from which personal information is collected
• Know the categories of third parties with whom personal information is disclosed
• Access certain personal information
• Correct inaccurate personal information
• Request deletion of personal information, subject to exceptions
• Opt out of certain sale or sharing of personal information
• Limit certain uses or disclosures of sensitive personal information where applicable
• Receive equal treatment for exercising privacy rights

California law requires covered businesses to provide information about applicable privacy rights and methods for submitting requests.

Sale or Sharing of Personal Information

We do not sell personal information for monetary consideration. We also do not knowingly share personal information for cross-context behavioral advertising in a manner that constitutes “sharing” under applicable California law.

17. European Economic Area, United Kingdom, and Similar Privacy Rights

If you are located in a jurisdiction where laws such as the GDPR or UK GDPR apply, you may have additional rights concerning your personal information.

These may include:

• Access
• Correction
• Erasure
• Restriction of processing
• Objection to processing
• Data portability
• Withdrawal of consent
• Complaint to a supervisory authority

Where applicable, we will provide information about the purposes of processing, categories of personal information, legal bases, recipients, retention periods, international transfers, and other information required by applicable law.

Where we rely on consent, you may withdraw that consent at any time, although withdrawal does not affect processing that occurred before withdrawal.

18. Children's Privacy

Orrop is not intended for children who are under the minimum age permitted to use the Service under applicable law.

We do not knowingly collect personal information from children in circumstances where doing so would violate applicable children's privacy laws.

If you believe that a child has provided personal information to us in a manner that violates applicable law, please contact us so that we can review and take appropriate action.

Where applicable, children's privacy laws may impose additional requirements on websites that knowingly collect information from children.

19. Marketing Communications

We may send users service-related communications and, where legally permitted and as appropriate, marketing communications.

Marketing communications may include:

• Product updates
• New Orrop features
• Platform announcements
• Relevant recommendations
• Promotional communications
• Other information we believe may be relevant to users

You can unsubscribe from marketing emails by following the unsubscribe instructions contained in those emails or by contacting us.

Even if you opt out of marketing communications, we may still send essential transactional or service-related communications.

20. Reviews, Ratings, and User Content

Orrop may allow users to submit reviews, ratings, comments, recommendations, or other content.

When you voluntarily publish information in a public area, that information may be visible to other users and may potentially be indexed by search engines or copied by third parties.

You should therefore avoid including information you do not want to become publicly available.

We may retain and process user-generated content as necessary to operate the relevant feature, enforce our policies, resolve disputes, or comply with legal obligations.

21. Account Deletion

Where account deletion functionality is available, you may request deletion of your account through the relevant account settings or by contacting us.

Deleting an account may not result in the immediate deletion of every piece of information associated with the account.

For example, we may retain certain information when reasonably necessary for:

• Legal compliance
• Fraud prevention
• Security
• Accounting
• Dispute resolution
• Enforcement of agreements
• Legitimate business records

Where information cannot be deleted for a legally permitted reason, we may restrict its use to the purposes permitted by law.

22. Data Breaches and Security Incidents

Although we take reasonable measures to protect personal information, no online system is completely immune from security incidents.

If we determine that a security incident has occurred that requires notification under applicable law, we will provide notifications as required by law.

Such notification may be made by email, website notice, or another legally permitted method.

23. Do Not Track

Some browsers provide “Do Not Track” signals or similar mechanisms.

Because there is currently no universally accepted technical standard governing all such signals, Orrop may not respond to every browser-based Do Not Track signal unless required by applicable law.

Where applicable law requires us to recognize a legally valid privacy preference signal, we will handle such signals as required.

24. Third-Party Social Media

Orrop may include links, buttons, widgets, or integrations associated with social media platforms.

Interactions with those features may allow third parties to collect information about your visit according to their own privacy practices.

We do not control the information collected by third-party social media platforms.

Please review their respective privacy policies before using those services.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be necessary because of:

• Changes to Orrop
• New features
• Changes to our data practices
• Changes to third-party services
• Changes to applicable laws or regulations
• Security or operational considerations

When we make changes, we may update the “Last Updated” date at the beginning of this Privacy Policy.

Where required by law, we will provide additional notice or obtain consent for material changes.

Your continued use of Orrop after an updated Privacy Policy becomes effective means that you acknowledge the updated policy, subject to applicable law.

26. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact us:

Orrop
Website: https://orrop.com
Email: shipon@orrop.com

For privacy requests, please use the subject line:

“Privacy Request”

We will make reasonable efforts to respond to privacy-related inquiries and requests in accordance with applicable law.

27. Important Notice

This Privacy Policy is intended to explain Orrop's privacy practices in a clear and comprehensive manner. However, privacy and data protection requirements vary depending on the user's location, the nature of the business, the information collected, and the services used.

Before publishing this Privacy Policy, Orrop should ensure that the statements above accurately reflect its actual technical, operational, advertising, analytics, payment, email, hosting, and data-processing practices.

In particular, any references to specific third-party providers, cookies, advertising technologies, international transfers, data retention periods, or privacy rights should be reviewed and customized before publication.

Last Updated: August 17, 2026