Privacy Policy

Your privacy matters to us. This policy explains what personal data Oralis collects through the Oralis mobile application and this website, why we collect it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and Belgian data-protection law.

1.Who we are

The data controller responsible for your personal data is:

The Oralis app is published and operated on the controller's behalf by Neuval Studio (Neuval, company number BE 1025.564.766, registered office Chaussée de Charleroi 49 BP 5, 1060 Brussels, Belgium), acting as data processor under a GDPR Article 28 data-processing agreement. For any question about this policy, your personal data, or to exercise your rights, contact the controller at info@oralis.be. For app or technical support, contact the operator Neuval Studio at info@neuval.be. We have not appointed a Data Protection Officer.

2.Scope of this policy

This policy applies to personal data processed when you:

• create and use an account in the Oralis mobile application;
• communicate with an Oralis agent through the app;
• use features such as favourites, valuations, the mortgage simulator, or the document vault;
• visit this website.

It does not cover third-party websites or services we link to, which have their own privacy policies.

3.What data we collect

We only collect what we need to provide and improve the service.

Data you provide

• Account & identity: first and last name, email address, mobile phone number, and the password you set.
• Verification & approval: email verification status, phone (SMS) verification status, and your account approval status as part of our client-vetting process.
• Messages & attachments: the content of conversations you have with Oralis agents, including any files or images you send.
• Documents: files you choose to store in your personal document vault.
• Property & valuation inputs: details you enter to request an indicative valuation or to use the mortgage simulator.

Data collected automatically

• Usage & preferences: favourites you save, in-app settings, notification preferences, and how you interact with features.
• Device & technical data: a device push token (to deliver notifications), app version, device type and operating system, and diagnostic / crash information used to keep the app stable.

4.How and why we use your data

We process your personal data on the following legal bases (GDPR Article 6):

Purpose	Legal basis
Create and manage your account, authenticate you, and run the client-vetting / approval process	Performance of a contract
Show curated listings, enable messaging with your agent, and provide favourites, valuations and the document vault	Performance of a contract
Send you service notifications (e.g. a new message, an approval update)	Performance of a contract / legitimate interest
Verify your identity by email and SMS to protect the community and prevent abuse	Legitimate interest / legal obligation
Review reports of objectionable content or abusive behaviour, moderate messages, and block, remove or suspend offending content or accounts to keep the community safe	Legitimate interest / legal obligation
Maintain security, prevent fraud, debug and improve the app (incl. crash diagnostics)	Legitimate interest
Send optional marketing or product updates, where applicable	Consent (you can withdraw at any time)
Comply with legal, accounting and regulatory obligations	Legal obligation

5.Who we share data with

We share personal data only with service providers who process it on our behalf (our "processors") and only as needed to run the service. Our main sub-processors are:

Provider	Role	Where
Google Ireland Ltd, Firebase / Google Cloud (Authentication, Firestore, Storage, Cloud Functions, Cloud Messaging, App Check, Crashlytics, Hosting)	App backend, sign-in, database, file storage, push notifications, security, crash diagnostics	EU (europe-west1; database in the eur3 Europe multi-region)
Whise	Real-estate listing / CRM data source powering the listings you see	EU
PriceHubble	Indicative automated property valuations	EU
Apple Inc.	App distribution and push-notification delivery (APNs)	EU / US

We may also disclose data where required by law, to enforce our terms, or to protect the rights, safety and property of our users or Oralis. We do not sell or rent your personal data to third parties.

6.International transfers

We aim to store and process your personal data within the European Union. Where a provider processes data outside the EU/EEA, that transfer is protected by appropriate safeguards, typically the European Commission's Standard Contractual Clauses and/or an adequacy decision. You can request a copy of the relevant safeguards via info@oralis.be.

7.How long we keep data

• Account data is kept while your account is active.
• When you delete your account, we delete or irreversibly anonymise your personal data, except where we must retain certain records to comply with legal obligations (for example accounting and tax records, which Belgian law generally requires us to keep for up to 7 years), in which case we keep only what is required for the legally mandated period.
• Messages and documents are retained for the life of your account unless you delete them earlier.
• Crash and diagnostic data (via Firebase Crashlytics) is kept for up to 90 days.
• Security and access logs are kept for up to 12 months.

8.Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict or object to certain processing;
• Portability, receive your data in a structured, machine-readable format;
• Withdraw consent at any time, where processing is based on consent.

You can delete your account and associated personal data directly in the app, under Settings → Delete account. For any other request, contact info@oralis.be; we will respond within the legal timeframe (generally one month).

If you believe your data has been mishandled, you have the right to lodge a complaint with the Belgian Data Protection Authority:

9.Security

We use technical and organisational measures to protect your data, including encryption in transit, authenticated and access-controlled backend services, app-integrity attestation (App Check / App Attest), and the principle of least privilege. No system is perfectly secure, but we work continuously to protect your information and will notify you and the authorities of a personal-data breach where the law requires.

10.Children

Oralis is intended for adults and is not directed at children. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11.This website

This website is intentionally lightweight. It uses only the cookies and storage strictly necessary to function and to remember your language preference. It does not use third-party advertising or cross-site tracking cookies, and it does not use third-party analytics.

12.Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of Oralis after an update means you accept the revised policy.

13.Contact us

Questions about your privacy? We're here to help.