Privacy Policy
Last updated: June 2026
This Privacy Policy explains how Orenew ("we", "us") handles personal information across the Orenew website and the Orenew desktop application. It is written to meet the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and the Israeli Privacy Protection Law.
Who we are
Orenew provides a desktop application that batch-applies decorative frames to event photos, together with this website for marketing, downloads, and subscription management. For questions about this policy or your data, contact us at support@orenew.app.
Information we collect
- Account information: when you create an account we collect your email address and authentication details (including data from Google or Facebook if you choose social sign-in).
- Billing information: subscriptions are processed by Lemon Squeezy, our merchant of record. We receive your subscription status, plan, and billing period — we do not receive or store your full card number.
- Device and licensing data: to enforce seat limits we record which devices are connected to your account.
- Website usage: basic technical data such as IP address, browser type, and pages visited, used to operate and secure the site.
- Your photos stay on your computer. The desktop app treats your source folders as read-only and processes images locally; your photos are not uploaded to us.
How we use information
- To create and manage your account and provide the app and website.
- To process subscriptions, enforce device seats, and deliver your plan to the desktop app.
- To respond to support requests and send service-related messages.
- To secure our services and comply with legal obligations.
Legal bases (GDPR)
Where the GDPR applies, we process personal data to perform our contract with you (providing the service), to pursue our legitimate interests (securing and improving the service), to comply with legal obligations, and on the basis of your consent where required (for example, non-essential third-party scripts).
How we share information
- Supabase — authentication and database hosting for your account and entitlements.
- Lemon Squeezy — payment processing and subscription management as merchant of record.
- UserWay — the third-party accessibility widget, which loads a script from its servers and may receive your IP address when the widget runs.
- Hosting and infrastructure providers that run the website.
- We do not sell your personal information. We may disclose information if required by law or to protect our rights.
International transfers
Our providers may process data outside your country, including in the United States. Where required, such transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Data retention
We keep account and subscription data for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. You can ask us to delete your account at any time.
Your rights (EU/UK GDPR)
You have the right to access, correct, delete, and port your data, to restrict or object to processing, and to withdraw consent. You may also lodge a complaint with your local data protection authority.
Your rights (California — CCPA/CPRA)
California residents have the right to know what personal information we collect, to access and delete it, to correct inaccuracies, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, and we will not discriminate against you for exercising your rights.
Your rights (Israel)
Under the Israeli Privacy Protection Law you have the right to review the information we hold about you and to request that inaccurate, incomplete, or outdated information be corrected or deleted. To exercise these rights, contact support@orenew.app.
Cookies and tracking
The website uses essential cookies required for sign-in and session management. The accessibility widget is provided by a third party and may set its own cookies or storage when enabled.
Security
We use industry-standard measures to protect your data, including encryption in transit. No method of transmission or storage is perfectly secure, but we work to protect your information against unauthorized access.
Children
Orenew is intended for business and professional use and is not directed to children under 16. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.
Contact us
For any privacy question or to exercise your rights, email support@orenew.app.