What we keep, and why.

OREX GATE runs OrexGate and is responsible for the personal data of the people who hold OrexGate accounts. Contact us about privacy at support@orexgate.com.

When a freelancer shares a gate, the freelancer decides who sees it and why. We process the data of the clients who open it on the freelancer's behalf, and also for our own legitimate interest in keeping files secure and tracing leaks.

• Your account: name, email address, password (stored only as a scrypt hash we cannot read back), workspace name, brand settings, and the teammates and invites you add. If you turn on two-factor sign-in: its secret, encrypted, and your recovery codes, stored only as hashes.
• Payment details you enter: bank, GCash, Maya, Wise or PayPal account names and numbers, QR images and payment links. We show them to the clients on your gates; we never use them to move money.
• Your files and the watermarked previews we make from them.
• Receipts your clients send: the image or PDF, the amount, date, sender name, transaction number, the client's email and any note.
• Client visits to a gate: a viewer code, a keyed hash of the IP address and of its network (never the address itself), a coarse browser type (such as "Chrome on Windows"), the browser's user agent, times of views and downloads, capture attempts (the preview losing focus, screenshot or print keys), and the client's email if they enter it. Previews carry an invisible watermark that links them to that visit.
• Billing: your plan, period and payment status, and the reference numbers Paddle or Xendit give us. Card and e-wallet details go to them, not to us.
• Running the service: sign-in sessions (a hashed token, user agent and hashed IP), an audit log of workspace actions, a record of the emails we send you (with any verification code removed once a mail provider has it), and error reports (the error, the page path with share links removed, and your browser type).
• Cookies: only essential ones, listed in the Cookie Policy. Anything optional waits for your consent.

• To provide OrexGate (performing our contract with you): storing and delivering files, showing payment details, handling receipts and releases, sending codes, receipts, release notices and renewal invoices.
• To keep it secure (our legitimate interest, and yours): rate limits, session binding, capture detection, leak tracing, fraud prevention and fixing errors.
• To bill and keep records (contract and legal obligation): plans, invoices and the tax records the law requires.
• Optional analytics (consent): none run today. If we add them, they load only after you switch them on in the cookie banner.

We share data only with providers that run part of OrexGate for us, under contracts that limit them to that job:

• Cloudflare (R2), which stores files, previews and receipts, encrypted at rest;
• our hosting and database providers, which run the app and its database;
• Resend, which delivers our emails;
• Paddle, merchant of record for USD plans, and Xendit, which processes PHP invoices (their own privacy notices cover what you enter at their checkout);
• Sentry, if enabled, which receives error reports.

Your clients see what you put on your gates, your teammates see your workspace, and we disclose data when the law requires it. We never sell personal data or share it for advertising.

Our providers may process data outside your country. Where the law requires it, transfers are covered by safeguards such as the European Commission's standard contractual clauses.

• An unconfirmed sign-up: 24 hours. A password reset: 30 minutes. An unconfirmed email change: 24 hours.
• Sign-in sessions: up to 30 days, or until you sign out or change your password.
• Receipt files: 90 days after the gate is released or archived. The amount, date and reference stay with your records.
• Files from a free trial that ends without a plan: 30 days after it ends. We email you at least 7 days before deleting them.
• Your account, workspace, gates, files and client visit records: while your account is open. After you ask us to close it, we delete them within 30 days.
• Billing and tax records: as long as tax law requires.
• Rate-limit counters: until their time window ends. Error reports: for the error-tracking provider's standard retention period.

You can ask to see, correct, export or delete your personal data, to restrict or object to how we use it, and to withdraw consent you gave. You can change your email and password yourself in Settings. For anything else, write to support@orexgate.com; we reply within 30 days.

If you are a client of an OrexGate user, contact the freelancer who shared the gate first, since they decide how it is used; we will help them answer you. You can also complain to a data protection authority: in the Philippines, the National Privacy Commission; in the EU or UK, your local supervisory authority.

Everything travels over TLS. Files and receipts are encrypted at rest in Cloudflare R2. Passwords are hashed with scrypt; session tokens, codes and IP addresses are stored only as hashes. Download and preview links are signed and expire after 15 minutes, and receipts are visible only to your workspace and the client who sent them.

OrexGate is a business tool and is not meant for anyone under 16. We do not knowingly collect children's data; if you think we have, write to us and we will delete it.

We will email account holders before a material change takes effect, and the date at the top of this page always shows the latest version.