Privacy Policy

This Privacy Policy describes how Oryxen collects, uses, stores, and protects personal and business data when you visit our website, request a demo, or use our platform. It applies to customers and prospects in the UAE, Pakistan, and other regions where we operate.

Oryxen is a SaaS workflow platform for TIC, inspection, certification, training, and compliance teams. We collect only the information needed to provide, secure, and improve the platform and related services.

Account and business information: user names, emails, company details, roles, engineer details, client details, team size, and services selected in demo or onboarding forms.

Workflow and document information: certificates, inspection reports, templates, signatures, attachments, approval records, audit logs, uploaded files, and related business records entered by customers.

Technical and usage information: device/browser data, IP address, session activity, pages visited, product usage activity, security events, and support communications.

We use data to operate the service, manage accounts, generate documents, support approvals, maintain audit trails, respond to demo and support requests, improve reliability, prevent misuse, and meet contractual or legal obligations.

Data may be stored and processed using cloud infrastructure and approved service providers. Access is limited to authorized users, customer admins, and Oryxen personnel who need it for support, security, or operations.

Customers are responsible for ensuring they have a lawful basis to upload personal data, signatures, inspection evidence, client records, employee information, or other regulated records into Oryxen.

Customers remain responsible for their own TIC, accreditation, labor, tax, privacy, and sector-specific obligations in the UAE, Pakistan, and any other country where they operate.

Oryxen aims to follow applicable UAE data protection requirements, including the UAE Personal Data Protection Law where applicable, and applicable Pakistan privacy, cybercrime, contractual, and sector rules.

Where customers operate in other jurisdictions, additional privacy, data residency, transfer, or sector rules may apply and should be addressed in the customer agreement.

Oryxen may use approved vendors to host, operate, monitor, secure, or support the platform. These may include cloud hosting, database hosting, backups, email delivery, file storage, analytics, error monitoring, AI/OCR processing, and business tools such as Google Workspace or equivalent.

Oryxen does not sell customer data. Customers may contact Oryxen for the latest subprocessor list.

Oryxen may use essential cookies or local storage to keep users signed in, secure sessions, remember preferences, and operate the application.

If analytics, advertising pixels, remarketing, chat widgets, or third-party tracking tools are enabled, Oryxen will disclose them on the website and, where required, request consent. Examples may include Google Analytics, LinkedIn Insight Tag, Meta Pixel, or similar tools.

Users can control non-essential cookies through browser settings or the website cookie banner, where available. Blocking essential cookies may prevent the platform from working correctly.

Users may request access, correction, deletion, or export of personal data, subject to customer instructions, legal retention duties, audit requirements, active subscription terms, and system backup limitations.

Customer data retention, export, deletion, and return are handled according to the subscription agreement, legal requirements, and technical backup cycles.

Oryxen applies reasonable security controls suitable for SaaS workflow software, including role-based access, authentication controls, encrypted connections, secure file handling, audit logs, backups, restricted admin access, and environment separation where applicable.

If Oryxen becomes aware of a security incident affecting customer data, it will investigate, contain the issue where possible, and notify affected customers in line with contractual and legal obligations.

Customers should not upload highly sensitive data unless it is necessary for their workflow and legally permitted. This includes any data that requires additional consent, sector approval, or enhanced protection under applicable law.

We may update this policy from time to time. The “Last updated” date at the top of this page will change when we do. Material changes may be communicated by email or a notice on the website.

Legal, privacy, security, and support enquiries: info@oryxen.com. Operating contact: UAE/GCC · Pakistan · Remote. Legal entity details will be updated once registration is complete.