Privacy Policy

Last updated: Jul 5, 2021

This Privacy Policy explains how Orapa, Inc. (“Orapa”, “we”, “us”, “our”) handles personal data collected by us as a data controller during the normal course of business (sales, marketing, and support), as well as how Orapa as a data processor handles all client relationship management information input into the Orapasoftware by the Account Owner or Authorized Users or generated on behalf of Account Owners in connection with the services. This Privacy Policy operates in connection with the Orapa Terms of Service and all capitalized terms not otherwise defined herein have the meaning set out in the Terms of Service.

Personal Information Definitions

Account Data: Information pertaining to the owner of the Account, including name, email, address, billing information.Information pertaining to the owner of the Account, including name, email, address, billing information.‍***Business Data***: Information generated either by the Account Owner (and its Authorized Users) or Orapa, where such Business Data does not include any personal Customer Data.‍***Customer Data***: Information relating to the identity and identification of a client or customer of the Account Owner, including name, address, etc. that is used for client relationship management purposes.

1. Orapa software and services

Orapa provides a user interface experience for use in connection with a Salesforce account. The software is accessed through the browser as a web application or chrome extension. Orapa products are self-service; Authorized Users determine and are solely responsible for what and how Customer Data is collected.  Orapa acts as a conduit through which Business and Customer Data flows into the Salesforce platform from you as the data collector. We do not store any data for longer than necessary to provide the Services. Orapa acts as a data processor with respect to Business Data and Customer Data and processes this data as instructed by Authorized Users, who are the data controllers.

2. Data collected during normal business transactions (unrelated to the software)

In the normal course of business, Orapa collects Account Data such as contact information (e.g. name, address, phone number, e-mail address, and employer) and payment details for Account Owners. We may also collect browsing data from individuals who visit the Orapa Site or use the Orapa Services. In these circumstances, Orapa acts as a data controller. Orapa also acts as a data controller with respect to our own internal client relationship management data. This is data that Orapa needs in order to provide services to our Customers, including performing contractual obligations, engaging in marketing activities, and providing support services (e.g. processing and responding to Customer inquiries and requests). The Account Owner owns and retains all rights to the Account Data, including the right to request deletion of the Account Data in accordance with this policy.We process Business and Customer Data on behalf of the Account Owner by facilitating its transmission and providing additional analytical tools at the Account Owner’s request. This processing is only done in order to fulfill contractual obligations, based on the individual’s consent, or in accordance with our legitimate business interests in improving our services, software and website experiences for users.  Where processing is based on consent, an individual may withdraw consent at any time by contacting us. Instructions for contacting us are provided below in Sections 4 and 5. We retain Customer and Business Data only for as long as necessary to fulfill the purposes of its collection and processing, including for the purposes of satisfying any legal, accounting, or reporting requirements, or for the length of time requested by the Account Owner, whichever is longer.For the site, Orapa may collect and analyze aggregate visitor information, including the domain name, visited surveys, referring URLs, and other publicly available information. We use this information to improve our website and services and to customize the content of our pages for each website visitor. Cookies may be used to deliver customized content to website visitors. Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies. A cookie is a small file that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive. We use the following cookies:

  • Required Cookies. These cookies are required to enable core site functionality.
  • Functional Cookies. These cookies allow us to analyze site usage so we can measure and improve performance.
  • Targeting cookies. These cookies are used by advertising companies to serve ads that are relevant to your interests.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site. Orapa collects Account Data from you directly or from your employer. Orapa will treat this Account Data according to this Privacy Policy, plus any additional restrictions imposed by the third party that provided Orapa with it or the applicable national law.  These third-party sources include Orapa business dealings with your employer and/or third parties you directed to share your Account Data with Orapa. Orapa does not sell personal information of any type, including Account Data, Business Data, and Customer Data.

3. Data collected by our users

Account Owners own and are data controllers of, Business and Customer Data. Depending on how the Account Owner and their Authorized Users choose to use the software, Customer Data may include certain personal information relating to the customers and clients of the Account Owner. Account Owners manage all Customer Data, as well as the users who create, manage, distribute, or report any Business Data generated by the Services. To the extent that Orapa processes or creates Business Data, Orapa does so as a data processor on behalf of Customers. Orapach processes Customer and Business Data on behalf of Customers in a manner consistent with this Privacy Statement. This may include performing certain analytical functions as part of the Services. Orapa only provides such services at the request of the Account Owner and does not process Customer or Business Data except as explicitly directed by the Account Owner. Orapa treats all Customer and Business Data as confidential. All Customer and Business Data are safeguarded using industry-standard security practices to prevent unlawful disclosure.  Orapa does not sell or make available Customer or Business Data except as requested by valid court order, search warrant, subpoena, or otherwise as agreed by the parties or required by law. Authorized Users of Organizational Accounts may generate information that is not subsequently linked to Salesforce or their organization. Until such information is linked to Salesforce or their organization, such information belongs to the Authorized User. If the Authorized User links an Object (as the term is defined in the Terms of Service), they acknowledge that they no longer have any rights of privacy or ownership over that information, and Orapa is under no obligation to ensure that private information belonging to Authorized User is not transferred to an Organizational Account’s control. Please carefully review your Objects, including “Notes,” to ensure that any information you link to Salesforce is information you are willing to share with your employer and/or complies with your employment agreement between you and the organization. If you wish to exercise rights in relation to Account Data for which Orapa acts as a data controller, you should contact Please note, however, that Orapa can or will delete your Account or Business Data only if there is no statutory obligation or prevailing right of Orapa to retain it.  Note further that if you request that Orapa deletes your Account Data, you will not be able to continue to use any Orapa service that requires Orapa’s use of your Account Data.

4. Data subject rights

In certain circumstances, individuals may have the following rights under data protection law in relation to their personal information:

  • A right to access Customer or Account Data that Orapa collects, uses, discloses, or processes (if applicable) about you
  • Rectification of inaccurate data
  • Erasure of personal data
  • Restriction of processing of personal data
  • Right to data portability
  • Right to object to processing of personal data and the right to be assured that such objections are promptly remitted to the data controller for correction
  • Right to withdraw consent to processing of any personal data
  • Right to opt-out of the sale of personal data, if applicable
  • Right to non-discriminatory treatment for exercise of data protection rights

Orapa will take steps to ensure that it verifies your identity to a reasonable degree of certainty before it will process the data protection rights you want to exercise. When feasible, Orapa will match Customer or Account Data provided by you in submitting a request to exercise your rights with information already maintained by Orapa. This could include matching two or more data points you provide when you submit your request with two or more data points that are already maintained by us. In accordance with the verification process set forth in the California Consumer Privacy Act (“CCPA”), Orapa will require a more stringent verification process for deletion requests, or for Account Data that is considered sensitive or valuable, to minimize the harm that might be posed to you by unauthorized access or deletion of your Account Data. If Orapa must request additional information from you outside of the information that is already maintained by Orapa, Orapa will only use it for the purposes of verifying your identity so you can exercise your data protection rights, or for security and fraud-prevention purposes. Orapa will decline to process requests that are manifestly unfounded, excessive, fraudulent, or are not otherwise required by local law.