Where is my data stored?
The Oryon Data platform and its database are hosted in Canada, in Google Cloud's Montréal region. Your data stays yours: we do not sell it, and we do not use it to train artificial intelligence models.
Last updated: September 10, 2026
Your data stays your property
The data you import, sync or connect to Oryon Data remains at all times the exclusive property of your organization. Oryon Data Intelligence Corp. acquires no ownership, commercial licence or right of reuse over it, except to the extent strictly necessary to deliver the services you have subscribed to.
We never sell our customers' data, and we never use it to train artificial intelligence models, whether generalized or personalized.
- No sale, rental or commercial exploitation of your data to third parties.
- No transfer to data brokers or information resellers.
- No use for serving or targeting advertising, and none for credit or lending assessment.
- Your data is never shared with other Oryon Data customers.
- We may use aggregated, anonymized statistics — which cannot be traced back to your organization — to improve the platform. Google user data and Meta Platform data are excluded from this use.
Where your data lives
The Oryon Data platform and its PostgreSQL database run on Google Cloud in the northamerica-northeast1 region (Montréal, Québec). That choice is deliberate: it keeps our customers' data in Canada, close to the Québec organizations we serve, rather than in the default US region.
Platform and database
Google Cloud — Montréal region (northamerica-northeast1), Canada
The providers involved in delivering the service
- Google Cloud PlatformCanada — Montréal
Hosting for the platform and its database
- CloudflareGlobal network
Network, content delivery and abuse protection
- VercelUnited States
Hosting for the oryondata.com website
- OpenAIUnited States
Generating the analyses and recommendations you request
- StripeUnited States
Payment and billing processing
Some of these providers process data outside Canada, primarily in the United States. Those activities are governed by each provider's data processing agreement. The current list of our providers appears in our privacy policy.
How your data is protected
Oryon Data applies security measures consistent with industry practice and proportionate to the nature of the data being processed.
Read-only access
Every platform you connect to Oryon — Google Analytics, Google Ads, Google Search Console, Facebook Pages, Instagram, Meta Ads, Shopify, HubSpot, LinkedIn and TikTok — is connected read-only. Oryon never posts, modifies or deletes anything in your accounts.
The single exception is exporting a report to Google Slides: you ask for it explicitly, and the permission used grants access only to files Oryon itself created, never to the rest of your Drive.
Encryption at rest and in transit
Your data is encrypted while it travels (HTTPS/TLS) and while it is stored. The connection between the platform and its database is authenticated and encrypted.
Access control and least privilege
Access to production systems is restricted to authorized people and relies on individual identities rather than shared accounts. Keys and access tokens are held in a secret manager, never in source code.
Secure authentication
Access to your workspace relies on signed sessions. When you connect a third-party platform, authorization goes through OAuth: Oryon never sees and never stores the passwords to your accounts.
Workspace isolation
Each workspace sees only its own data. Nothing is pooled across customer organizations.
Backups and monitoring
The database is backed up automatically every day. Application errors and access logs are monitored so a failure or an unusual pattern is caught quickly.
You stay in control of your data
The permissions granted to Oryon Data are limited to the data needed to operate the services and features you choose to use. They can be changed or revoked at any time: your company keeps control of its information, its connections and the permissions it has granted.
- You grant only the permissions matching the features you turn on, one platform at a time.
- From the Connections page, disconnecting a source immediately and permanently deletes the access token Oryon holds and stops any further data retrieval.
- You can also revoke access directly from the platform itself — for example, in your Google account's permissions.
- Deleting your workspace or your account permanently deletes the associated data, within thirty (30) days at most.
- You may request access to your personal information, its correction, its portability or its deletion, under PIPEDA and Québec's Law 25.
Privacy Officer
Élody Sanchis, Co-founder — privacy@oryondata.com. Write to us to exercise your rights, request deletion of your data, or ask any privacy question.
How artificial intelligence processes your data
When you request an analysis, a summary, a recommendation or a report, the data needed to produce it is transmitted confidentially to our artificial intelligence subprocessor, OpenAI, for the sole purpose of generating that result for you. We name them rather than referring to a "specialized provider": you are entitled to know who processes your data.
- It is not used to train OpenAI's models: our use of the API is governed by terms that exclude this.
- It is used only to produce the analysis or report you asked for, and is never shared with other customers.
- It may be retained temporarily, for a period of up to thirty (30) days, for security and abuse-prevention purposes, and is then deleted in accordance with OpenAI's applicable policies.
- Google user data and Meta Platform data are never used to develop, train, fine-tune or otherwise improve any artificial intelligence model, generalized or personalized.
- One feature involves other providers: the checks on how visible your brand is also query Google Gemini and Perplexity, sending them none of your connected data and no personal information — only a generated market question. Our responsible AI policy sets this out in detail.
The analyses the platform produces are decision-support tools. They are neither human professional advice nor a guarantee of performance or future results: the decision remains yours.
Our commitment
Your data stays your data. Our job is to help you understand it better, never to take control of it away from you.
Trust, security and data governance are not secondary functions at Oryon Data: they determine whether the platform can be adopted responsibly, and they guide how we build it.