Privacy Policy
Last updated 7 August 2026
OREL is a marketing automation service operated by OREL Smart Solutions. We help small businesses plan, create and publish their own marketing content — including Google Business Profile, Pinterest, Instagram and Facebook — through each platform’s official API, on accounts businesses connect and control. This policy explains what data we handle, why, and what happens to it.
The short version. We hold information about the businesses that hire us, and access tokens for the social accounts those businesses connect. We use them only to create and publish content for that business. We do not sell data, and we do not use one client’s data to serve another.
Who this policy covers
Two groups of people:
- Our clients — businesses who use OREL to run their marketing.
- Visitors to orelsmart.com and to landing pages we build for our clients.
If you contacted one of our client businesses through a page we built, that business is the controller of your information. This policy describes our role as the service provider acting on their instructions.
What we collect
| Data | Why we hold it |
|---|---|
| Business details — name, industry, service area, description, contact information | To generate content that is accurate for that business |
| Social account access tokens (Pinterest, Instagram, Facebook, Google Business Profile) | To publish content to accounts the business has explicitly connected |
| Content we generate — text, images, captions, publishing history | To maintain the account, avoid duplication, and report on what was published |
| Performance data from connected platforms | To report results back to the business |
| Enquiries submitted through client landing pages — name, contact details, message | Passed to the client business so they can respond |
| Basic website analytics on orelsmart.com | To understand which pages are useful |
Connected social accounts
When a business connects a social account, we receive an access token through that platform’s official authorisation process. We want to be specific about what that does and does not allow:
- We access only the connected account’s own content — its boards, its posts, its metrics. We do not access other users’ content.
- We use these tokens only to publish and manage content on behalf of that business.
- Tokens are stored encrypted and are never shared with other clients or third parties.
- A business can disconnect an account at any time, from our system or from the platform’s own settings. Disconnection revokes our access immediately.
- We do not post without the business’s approval of the content or a standing instruction from them to publish on a defined schedule.
Our use of information from Pinterest, Meta and Google APIs follows those platforms’ developer policies and applicable API terms, including their limited-use requirements.
How we use data
- To generate marketing content for the business that hired us
- To publish that content to accounts they have connected
- To report on what was published and how it performed
- To operate, secure and improve the service
- To communicate with our clients about their account
What we do not do
- We do not sell personal data.
- We do not share data between clients.
- We do not use client data or connected-account content to train machine learning models.
- We do not access social accounts other than those explicitly connected to us.
Service providers we use
OREL relies on a small number of third parties to operate. Each receives only what it needs to perform its function:
- Social and search platforms — Pinterest, Meta (Instagram and Facebook), Google — for publishing and analytics on connected accounts.
- AI model providers — for generating text and images. Content prompts may include business details needed to make the output accurate.
- Email delivery providers— for transactional and campaign email sent on a client’s behalf.
- Hosting and infrastructure providers — for running the service and storing data.
How long we keep it
- Client business data and published content — for as long as the business is a client, and up to 12 months afterwards for records and reporting.
- Access tokens — until the account is disconnected or the client relationship ends, then deleted.
- Enquiries from landing pages — held for the client business and retained according to their instructions.
A client can request earlier deletion at any time and we will comply.
Security
Access tokens and credentials are stored encrypted. Access to production systems is restricted and authenticated. We keep backups of client data so that a failure at any one provider cannot destroy it. No system is perfectly secure, and we do not claim otherwise — but if a breach affects your data, we will tell you.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, ask us to delete it, object to certain processing, or receive a copy in portable form. To exercise any of these, email us at the address below and we will respond within 30 days.
If you submitted an enquiry through a landing page we built for a client, we will forward your request to that business, since they control that information.
Children
OREL is a business service and is not directed at children. We do not knowingly collect personal data from anyone under 16.
International transfers
We operate from the United States and our service providers may process data in other countries. Where required, we rely on appropriate safeguards for those transfers.
Changes to this policy
If we change this policy materially, we will update the date at the top and notify our clients directly. Continued use of the service after a change means acceptance of the updated policy.
Contact
OREL Smart Solutions
Email: info@orelsmart.com
Website: orelsmart.com
Questions about this policy, requests about your data, or anything else — that address reaches a person.