Privacy Policy

Last updated May 21, 2026

Introduction

At Ory, we take data privacy seriously. This Privacy Policy describes how we collect, receive, process, or store information in connection with our business operations, including the services we provide that reference this Privacy Policy. The Services include our application programming interfaces, our website available at https://www.ory.com/, and our mobile application. This Privacy Policy outlines your rights and choices regarding processing your Personal Data.

In this Privacy Policy, "Ory", "we", "us", or "our" each mean Ory Corp or an affiliate or subsidiary of Ory Corp.

We use the term "Personal Information" to mean any information that identifies you as an individual, is about you as an individual, or is defined as personal information under applicable law.

1. Scope of this Privacy Policy

This Privacy Policy applies to anyone who interacts with our Business Operations or uses the Services. If you are interacting with our Business Operations on behalf of a company, then (i) you represent that you have the authority to act on behalf of Your Organization, and (ii) for all purposes in this Privacy Policy, the term "you" means Your Organization. This Privacy Policy does not apply when you have entered into an agreement, privacy policy, or terms with a third party that governs your provision of Personal Information through our Services.

2. Ory’s Roles & Responsibilities

The controller responsible for the processing of your Personal Information is Ory Corp.

3. Collection of Information

3.1 Information That You Provide

We collect information that you provide to us, including your name, employment information, mailing address, telephone number, email address, and date of birth. This includes information provided via email or in person.

3.2 Device Identifiers; Logs; Tags

We may collect certain technical information from your computer or mobile device when you use our Services, such as your Internet Protocol address, web browser type, pages viewed, and search terms.

3.3 Cookies

We may collect certain information using “cookies,” which are small text files that the Website saves on your device. We will ask for your consent before placing cookies on your device, except for those that are strictly necessary.

3.4 Web Beacons and Tags

The Services may use beacons and tags to link objects to Internet addresses or other remote means of receiving or processing information.

3.5 User-Generated Content

You may provide comments, reviews, and other content which will be accessible to others. We will only edit or remove such content in our sole discretion.

3.6 Geolocation Information

We may determine your location using your device features with your consent.

3.7 Anonymous Information

We may collect information that does not identify you, including demographic or statistical information.

4. How We Use Your Information

4.1 Business Operations and Services

We use your Personal Information for providing you with the Services you request, managing your accounts, and communicating with you.

4.2 Analysis and Improvement

We may use your information for internal administration, auditing, and improving our Services.

4.3 Information and Notices

If you submit your Personal Information, we may provide you with information about our Services.

4.4 Security

We may use your Personal Information to ensure the safety and security of our Business Operations and Services.

4.5 Compliance with Legal Obligations

We may have legal obligations to process your Personal Information.

4.6 Responding to Your Requests

We use your Personal Information to respond to your requests.

5. Sharing Information

We may share your Personal Information as described below:

5.1 Third-Party Service Providers

We may engage third-party service providers to perform functions on our behalf, having access to your Personal Information as needed.

5.2 Consultants

We may provide access to your Personal Information to attorneys, accountants, and other consultants when necessary.

5.3 Business Transfer

Ory may transfer your Personal Information to a third party in the event of a merger or acquisition.

6. Storage

6.1 Security

We have implemented reasonable measures to protect your information from unauthorized access. We retain your information in accordance with applicable law.

6.2 Retention

We retain information as necessary to fulfill the purposes for which it was collected, including legal requirements.

6.3 Reviewing, Deleting, or Correcting Information

You can request to review, correct, or delete your information by contacting us.

7. Cookie Privacy Policy

7.1 Cookies

Cookies are used to enhance user experience and analyze usage. Consent is required for non-essential cookies.

7.2 Example of Relevant Cookies

Necessary Cookies: Cloudflare, Cookiebot

Statistics Cookies: PostHog

9. Your Choices Regarding Your Personal Information

You can opt out of marketing communications and request access to your Personal Information as provided above.

9.2 United States State-Specific Notices Regarding Your Privacy Rights

You have rights under various laws, such as the California Consumer Privacy Act.

10. Transfers to Third Countries

Ory may transfer your Personal Information internationally, and safeguards will be implemented to protect your data.

10.1 Our Obligations to You Under the Data Privacy Framework

Ory complies with data privacy frameworks regarding personal data processing.

12. Your GDPR Rights

You have rights under GDPR, including the right to access, review, and delete your Personal Information.

19. Contact Information

For questions about this Privacy Policy or data collection practices, please contact Ory at privacy@ory.com.

20. Effective Date

The effective date of this Data Privacy Policy is May 21th, 2026.