1. Introduction
Welcome to Oniriz. This Privacy Policy explains how Oniriz (“we”, “us”, “our”) collects, uses, and protects information when you use the Oniriz Chrome extension and website at oniriz.com. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Lithuanian data protection law.
Oniriz is operated by MB “Milksva”, company code: 305063406, VAT No. LT100014030718, based in Lithuania, European Union.
2. What Data We Collect
2.1 When using the free extension (Basic plan)
We collect the following minimal data:
- Website URL of the page you are currently visiting, solely for the purpose of identifying the company behind that website and generating an ESG analysis
- Chrome storage preferences stored locally on your device only, including dark mode setting, extension on/off state, and score visibility toggles — this data never leaves your device
We do not collect your name, email address, browsing history, or any other personal information when using the Basic plan.
2.2 When creating a Pro account (planned feature)
When the Pro plan becomes available, we will collect:
- Email address for account creation and login
- Payment information processed securely by a third party payment provider — we do not store your payment card details
- Usage data such as number of analyses performed, solely for plan limit enforcement
We will update this policy before the Pro plan launches.
3. How We Use Your Data
We use the data we collect for the following purposes:
- To identify the company behind the website you are visiting and generate ESG scores
- To cache analysis results in our database to improve performance and reduce costs — cached results are stored against a domain name only, not against any user identity
- To provide and improve the Oniriz service
- To respond to contact form inquiries submitted via oniriz.com
We do not use your data for advertising, profiling, or any purpose beyond what is described above.
4. Third Party Services
To provide the analysis service, we share the website URL you are visiting with the following third parties:
OpenAI — We send the domain name of the website you visit to OpenAI’s API to perform company identification and ESG analysis. OpenAI processes this data according to their own privacy policy available at openai.com/privacy. We do not send any personal information about you to OpenAI — only the domain name of the site you are visiting.
Heroku (Salesforce) — Our backend server runs on Heroku infrastructure located in the European Union. Domain names and cached analysis results are stored here. Heroku’s privacy policy is available at salesforce.com/privacy.
We do not sell your data to any third party. Ever.
5. Data Storage and Retention
Analysis results are cached in our database for 30 days associated only with a domain name, not with any individual user
Local extension preferences are stored on your device and can be cleared by uninstalling the extension
Contact form submissions are retained for as long as necessary to respond to your inquiry
6. Your Rights Under GDPR
As a user in the European Union you have the following rights:
- Right to access — you can request a copy of any personal data we hold about you
- Right to erasure — you can request deletion of your personal data
- Right to object — you can object to our processing of your data
- Right to portability — you can request your data in a portable format
- Right to withdraw consent — where processing is based on consent you can withdraw it at any time
To exercise any of these rights please contact us at the address below. We will respond within 30 days.
7. Cookies
The oniriz.com website uses essential cookies necessary for the website to function. We do not use advertising or tracking cookies.
If we introduce non-essential cookies in the future we will update this policy and request your consent before setting them.
8. Children’s Privacy
Oniriz is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any significant changes by posting a notice on oniriz.com. The date at the top of this page will always reflect when the policy was last updated.
10. Contact
If you have any questions about this Privacy Policy or how we handle your data please contact us:
MB “Milksva”: Email:hello@oniriz.com Website: oniriz.com Location: Lithuania, European Union
For GDPR related requests please use the subject line “GDPR Request” so we can prioritize your inquiry.