Privacy Policy

At Orion Labs ("we"), we respect your privacy. This Policy explains what data we collect through the orionlabs.gr website and the Client Portal, how we use it, and what your rights are.

1. Who we are

Orion Labs — a digital company (websites, applications, advertising, automations). Website: orionlabs.gr. For data-protection matters, contact info@orionlabs.gr.

2. What data we collect

• Account details (Client Portal): name, email, company, phone.
• Sign-in with Google: when you sign in with Google, we receive basic profile information (name, email address) via OAuth. We never access your password or any other data from your Google account.
• Project & communication data: messages, files/photos you upload, project requests and appointments.
• Contact form: your name, email and message.
• Technical data: cookies/local storage strictly necessary for your login session, plus basic usage data for security and improvement.

3. How we use your data

• To provide and manage your services and projects.
• To communicate with you (updates, messages, appointments, replies to requests).
• For security, abuse prevention and improving the website.

4. Third parties / Processors

We use trusted providers that process data on our behalf, under their own privacy policies:

• Supabase — database, authentication and file storage.
• Google — sign-in (OAuth) and the AI assistant (Gemini) that powers the chat responses.
• Cloudflare — hosting & content delivery network (CDN).
• Web3Forms — delivery of the contact form.

We do not sell your personal data to third parties.

5. Your rights (GDPR)

You have the right to access, rectify, erase, restrict, port and object to the processing of your data. To exercise any right, contact info@orionlabs.gr — we can also delete your account and data on request.

6. Data retention

We keep data for as long as our collaboration lasts and for as long as legally required. After a deletion request, data is removed within a reasonable time.

7. Security

We apply technical measures (encrypted transfer, per-user access control — Row-Level Security) to protect your data. No system is 100% secure, but we take reasonable measures.

8. Cookies / Local storage

We use only essential cookies/localStorage to maintain your login session. We do not use third-party advertising cookies in the portal.

9. Changes to this policy

We may update this Policy. The date at the top shows the latest update.