In short: we collect what we need to run your account and generate your listings. Your jewelry photos belong to you, we do not sell your data, and we do not use your images or product text to train AI models.
1. Who we are
Orla is operated by Doty Chou Design & Co. LLC, 28-07 Jackson Avenue, unit 11-1101, New York, NY 11101, USA ("Orla", "we", "us"). We are the data controller for the information described in this policy. You can reach us at [email protected].
2. Information we collect
Information you give us
- Account details — name, email address, business name, and password.
- Product content — the jewelry photographs you upload, together with the specifications you enter (metal, stone, carat, SKU, price, dimensions, production notes) and any brand guidelines or reference links you provide.
- Correspondence — messages you send us by email or through the service.
Information we collect automatically
- Usage data — pages viewed, features used, batches generated, timestamps.
- Technical data — IP address, browser type, device type, approximate location derived from IP.
Information we do not collect
We do not store your full card number, expiry date, or security code. Card details are entered directly with our payment processor and never reach our servers. We receive only the last four digits, card brand, and the result of the transaction.
3. Your images and product content
This is the part that matters most for a jewelry business, so we want to be explicit:
- You retain all rights in the photographs and product information you upload.
- You grant us a limited licence to store, process, and transform that content solely to provide the service to you — that is, to generate images, titles, descriptions, tags, and specification tables on your behalf.
- We do not use your images or product text to train artificial intelligence models, and we do not permit our AI providers to do so.
- We do not sell, rent, or licence your content to third parties.
- We will not use your product images in our own marketing without asking you first, in writing.
4. How we use your information
| Purpose | Legal basis (UK/EU) |
|---|---|
| Providing the service — generating and storing your listings | Performance of a contract |
| Taking payment and managing subscriptions | Performance of a contract |
| Support, and responding to your messages | Performance of a contract |
| Security, fraud prevention, and abuse detection | Legitimate interests |
| Improving the service (aggregated and de-identified usage patterns) | Legitimate interests |
| Marketing emails about Orla | Consent — you can withdraw at any time |
| Meeting tax, accounting, and legal obligations | Legal obligation |
5. Who we share it with
We use a small number of service providers to run Orla. Each is bound by contract to protect your data and to use it only on our instructions.
| Provider | What it handles |
|---|---|
| Stripe | Payment processing and subscription billing |
| Cloudinary | Storage and delivery of uploaded and generated images |
| Cloudflare | Website hosting, DNS, CDN, and security filtering |
| DigitalOcean | Application hosting |
| Google Workspace | Business email and documents |
| Google Cloud (Vertex AI) | Image generation and text generation |
We may also disclose information where we are legally required to, or to establish or defend legal claims. If Orla is ever acquired or merged, your information may transfer as part of that transaction — we will notify you before it becomes subject to a different privacy policy.
6. Automated processing
Orla uses AI models to analyse your photographs and generate images and text. This processing is automated, but it does not produce legal or similarly significant effects about you as an individual — it produces draft product content, which you review and edit before publishing. See our Terms of Service for what that means in practice.
7. Cookies
We use cookies that are strictly necessary to keep you signed in and to keep the service secure. We use a small amount of privacy-respecting analytics to understand which features are used. We do not run third-party advertising trackers.
8. How long we keep it
- Account data — for as long as your account is open, then up to 90 days after closure.
- Uploaded and generated images — for as long as your account is open. You can delete individual products at any time. On account closure they are deleted within 90 days.
- Billing and tax records — retained as long as the law requires, typically seven years.
- Backups — deleted content may persist in encrypted backups for up to 35 days.
9. Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- ask us to delete your data;
- object to or restrict certain processing;
- receive your data in a portable format;
- withdraw consent where we rely on it;
- complain to your data protection authority.
If you are a California resident, we do not sell or share your personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.
To exercise any of these, email [email protected]. We will respond within 30 days.
10. Security
We use encryption in transit (TLS) and at rest, access controls limited to staff who need it, and reputable infrastructure providers. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authority as the law requires.
11. International transfers
We are based in the United States and our providers operate globally, so your data may be processed outside your country. Where data leaves the UK or EEA, we rely on Standard Contractual Clauses or an equivalent safeguard.
12. Children
Orla is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.
13. Changes
If we make a material change to this policy we will email account holders at least 14 days before it takes effect. The date at the top always reflects the current version.
14. Contact
Questions, requests, or complaints: [email protected], or write to us at 28-07 Jackson Avenue, unit 11-1101, New York, NY 11101, USA.