Privacy Policy

Last updated: 12 April 2026

1. Who We Are

ORI is a personal AI assistant developed by Wide Tropism Trading Sdn Bhd (Registration No. pending), Sungai Buloh, Selangor, Malaysia. ORI is designed to run locally on your own device and infrastructure.

2. Data We Collect

ORI processes the following data to provide its services:

• Account information: Name and password (hashed with SHA-256) when you register.
• Conversation history: Messages you send to ORI, stored locally on the server you operate.
• Financial records: Expenses, income, and bills you log — stored locally in your instance.
• Calendar & email data: Accessed via Microsoft Graph API with your explicit OAuth consent. ORI reads but does not store email content beyond session memory.
• WhatsApp messages: Processed locally via Baileys (unofficial WhatsApp Web library). Messages are not sent to any third-party server.
• Voice recordings: If you use ORI Live, audio is transcribed locally using Whisper. Recordings are deleted after transcription unless you explicitly save them.

3. Where Data Is Stored

All data is stored locally on the server where ORI is installed. No data is uploaded to cloud servers operated by us. However, ORI uses the following third-party APIs which may process your data according to their own privacy policies:

• Anthropic Claude API — for AI reasoning (messages sent for processing)
• Microsoft Graph API — for calendar and email access
• Ollama (local) — for local AI model inference (no external data transfer)

4. Data Sharing

We do not sell, rent, or share your personal data with any third party. Data is only sent to the third-party APIs listed above as necessary to provide ORI's functionality.

5. Your Rights (PDPA Malaysia)

Under the Personal Data Protection Act 2010 (PDPA), you have the right to:

• Access your personal data held by ORI
• Correct any inaccurate personal data
• Request deletion of your data
• Withdraw consent for data processing

Since all data is stored locally on your own infrastructure, you have full control over your data at all times. To exercise these rights or for any privacy inquiries, contact us at the address below.

6. Data Retention

Conversation history and financial records are retained until you delete them. You can clear your data at any time through ORI's settings or by deleting the local data files.

7. Security

Passwords are hashed using SHA-256. All local communication uses HTTPS when configured. We recommend running ORI behind a firewall or VPN (such as Tailscale) for additional security.

8. AI Disclaimer

ORI is an AI assistant and may produce inaccurate or incomplete information. ORI does not provide professional financial, legal, or medical advice. Always verify important information with qualified professionals.

9. Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the "Last updated" date above.

10. Contact

Tang Wei Xiang
Wide Tropism Trading Sdn Bhd
Sungai Buloh, Selangor, Malaysia
ori.assistant.my@gmail.com