Privacy Policy

1. Introduction

Welcome to Oniriz. This Privacy Policy explains how Oniriz (“we”, “us”, “our”) collects, uses, and protects information when you use the Oniriz Chrome extension and website at oniriz.com. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Lithuanian data protection law.

Oniriz is operated by MB “Milksva”, company code: 305063406, VAT No. LT100014030718, based in Lithuania, European Union.

2. What Data We Collect

2.1 When using the free extension (Basic plan)

We collect the following minimal data:

• Website URL of the page you are currently visiting, solely for the purpose of identifying the company behind that website and generating an ESG analysis.
• Chrome storage preferences stored locally on your device only, including dark mode setting, extension on/off state, and score visibility toggles — this data never leaves your device.

We do not collect your name, email address, browsing history, or any other personal information when using the Basic plan.

2.2 When subscribing to Oniriz Pro

When you subscribe to the Pro plan, we collect:

• Email address — your Google account email, verified directly with Google, used to identify your subscription. We never see or store your Google password.
• Payment information — processed by manageup.eu and its payment provider Paysera; we do not store your payment card details ourselves.
• Subscription status — whether your Pro subscription is active and when it renews or ends.

3. How We Use Your Data

We use the data we collect for the following purposes:

• To identify the company behind the website you are visiting and generate ESG scores.
• To cache analysis results in our database to improve performance and reduce costs — cached results are stored against a domain name only, not against any user identity.
• To verify and manage your Oniriz Pro subscription.
• To provide and improve the Oniriz service.
• To respond to contact form inquiries submitted via oniriz.com.

We do not use your data for advertising, profiling, or any purpose beyond what is described above.

4. Third Party Services

To provide the Oniriz service, we share limited data with the following third parties:

• Google Gemini — our default AI provider. We send the domain name of the website you visit to Google's Gemini API to perform company identification and ESG analysis. Google processes this data according to its own privacy policy, available at policies.google.com/privacy.
• OpenAI — an optional, alternative AI provider we may use for the same purpose as Google Gemini above. OpenAI processes this data according to its own privacy policy, available at openai.com/privacy.
• Google (Sign-in) — if you subscribe to Oniriz Pro, we verify your Chrome sign-in directly with Google to confirm your account email. We never receive or store your Google password.
• manageup.eu and Paysera — Oniriz Pro subscriptions and payments are processed through manageup.eu's billing platform, which uses Paysera as its payment processor. Your email address and payment details are handled by these providers according to their own privacy policies.

Our backend server runs on our own server infrastructure within the European Union. Domain names and cached analysis results are stored there.

In neither case above do we send any personal information about you other than what is described — only the domain name of the site you are visiting, or, for Pro subscribers, your verified email address and subscription status.

We do not sell your data to any third party. Ever.

5. Data Storage and Retention

• Analysis results are cached in our database for 30 days, associated only with a domain name, not with any individual user.
• Local extension preferences are stored on your device and can be cleared by uninstalling the extension.
• Contact form submissions are retained for as long as necessary to respond to your inquiry.
• Pro subscription status is retained for as long as your subscription is active, plus a reasonable period afterwards for support and accounting purposes.

6. Your Rights Under GDPR

As a user in the European Union you have the following rights:

• Right to access — you can request a copy of any personal data we hold about you.
• Right to erasure — you can request deletion of your personal data.
• Right to object — you can object to our processing of your data.
• Right to portability — you can request your data in a portable format.
• Right to withdraw consent — where processing is based on consent you can withdraw it at any time.

To exercise any of these rights please contact us at the address below. We will respond within 30 days.

7. Cookies

The oniriz.com website uses essential cookies necessary for the website to function. We do not use advertising or tracking cookies.

If we introduce non-essential cookies in the future we will update this policy and request your consent before setting them.

8. Children's Privacy

Oniriz is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any significant changes by posting a notice on oniriz.com. The date at the top of this page will always reflect when the policy was last updated.

10. Contact

If you have any questions about this Privacy Policy or how we handle your data please contact us:

MB “Milksva”
Email: hello@oniriz.com
Website: oniriz.com
Location: Lithuania, European Union

For GDPR related requests please use the subject line “GDPR Request” so we can prioritize your inquiry.