GDPR & Data Rights
Your rights under the General Data Protection Regulation - and how to exercise them.
Last updated June 30, 2026
Orai is committed to GDPR compliance. This page explains the lawful bases under which we process your personal data and how you can exercise your rights as a data subject.
Lawful basis
We process data to perform our contract with you, protect Orai through legitimate interests, and honor consent for optional uses such as marketing emails.
Your rights
Under GDPR you can access your data, correct inaccuracies, erase your data, restrict processing, object to processing, request portability, and lodge a complaint with your supervisory authority.
Access & portability
You can request a copy of your account data, including sessions, scores, and profile information. We respond to formal access requests within 30 days.
Deletion
You can delete individual recordings or your entire account from within the app. On account deletion, personal data is purged from our systems within 30 days where legally permitted.
International transfers
Orai is based in the United States. Where we transfer personal data from the EEA or UK to US infrastructure, we rely on appropriate transfer safeguards.
DPA for Enterprise
Enterprise customers processing personal data through Orai on behalf of employees can request a Data Processing Agreement. Contact your account manager or our team.
Contact our DPO
Our privacy team can be reached at privacy@orai.com. We respond to data subject requests within 30 days.