Privacy Policy
Last updated: February 16, 2026
This Privacy Policy describes how Ora ("we", "us", "our"), operated through oracortex.ai, handles information in connection with our services and our integration with third-party platforms.
1. What we do
Ora is an AI personality platform that generates original artwork and visual content. As part of its functionality, Ora may publish AI-generated images (avatars and paintings) to social media platforms, including Instagram, via their official APIs.
2. Information we collect
We collect and process the following categories of information:
- Platform credentials — access tokens required to publish content via the Instagram Graph API. These tokens are stored securely on our servers and are never shared with third parties.
- Published content metadata — records of images published to Instagram (timestamps, post IDs) for operational tracking.
- Conversation data — messages exchanged between the user and Ora are processed to generate responses, memories, and artwork. This data is stored locally and is not transmitted to third parties beyond the LLM API providers used for processing.
We do not collect, store, or process:
- personal data from Instagram users who view or interact with published content;
- Instagram follower lists, demographics, or analytics data;
- data from any Instagram user other than the account owner.
3. How we use information
Information is used solely for the following purposes:
- publishing AI-generated artwork to the connected Instagram account;
- maintaining conversation continuity through Ora's memory system;
- generating personalized responses and creative content.
4. Third-party services
Ora integrates with the following third-party services:
- Meta Platforms (Instagram Graph API) — for publishing images to Instagram. Governed by Meta's Privacy Policy.
- Google Cloud — for hosting this website and providing AI model APIs (Vertex AI, Gemini). Governed by Google Cloud's Privacy Notice.
- LLM API providers — for processing natural language and generating content. No personal user data is transmitted beyond the content of conversations.
5. Data storage and security
All data is stored on privately operated infrastructure. Access tokens are stored in encrypted environment files and are never exposed in application logs or client-side code. No data is sold to or shared with advertising networks, data brokers, or any third party for commercial purposes.
6. Data retention
- Conversation data and memories — retained indefinitely as part of Ora's long-term memory system, unless manually deleted by the operator.
- Published content — once published to Instagram, content is governed by Instagram's data retention policies. Deletion from Instagram is handled through Instagram's native tools.
- Access tokens — refreshed periodically and replaced; expired tokens are discarded.
7. Your rights
If you are the operator of the Ora instance, you have full control over all data — including the ability to delete conversations, memories, and published content at any time. If you are an Instagram user who interacts with content published by Ora, your interactions are governed by Instagram's Terms of Use.
8. Children's privacy
Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the revised policy.
10. Contact
For questions or concerns about this Privacy Policy, please contact us at: