Privacy Policy
ORA AI Inc. (operating as Mamoth-Auto, "ORA", "we", "us") provides a communications and relationship-intelligence platform to automotive dealerships ("dealers"). This policy explains what information we process, how we use it, and the choices available to you. Much of the personal information handled through ORA belongs to a dealer's own customers and is processed on that dealer's behalf.
01 Our roles
For information a dealer uploads or generates through ORA about their own customers, the dealer is the controller of that information and ORA acts as a service provider, processing it on the dealer's instructions. For information about a dealer's own account with us, ORA is the controller.
02 Information we process
- Dealer account information: business and contact name, email, phone, login credentials, and billing details.
- Dealer customer information: names, phone numbers, email addresses, and dealer-provided history (such as vehicle, service, or purchase details) used to run communications.
- Communications content and metadata: the SMS, email, and voice messages sent and received through ORA, along with delivery and engagement metadata.
- Social platform information: when a dealer connects their Facebook Page or Instagram account, ORA accesses — through Meta's official APIs and with the dealer's authorization — public comments on the dealer's posts and the page/account identifiers needed to read those comments and reply. ORA uses this only to recognize what a commenter asked for and to post a reply on the dealer's behalf. ORA does not access private messages or information beyond what is needed for this service.
- Technical information: log data, IP address, device and browser information, and usage data.
03 How we use information
We use information to operate and deliver the service — sending and receiving messages, responding to comments on the dealer's behalf, and building dealer-scoped relationship intelligence; to authenticate and secure accounts; to provide support; to honor opt-out and do-not-contact requests; and to comply with law. We do not sell personal information, and we do not use it for advertising.
04 Consent and legal bases
Communications sent through ORA rely on consent and other lawful bases that are obtained and managed by the dealer, consistent with applicable law — including Canada's Anti-Spam Legislation (CASL) and PIPEDA, Quebec's Law 25, and the US Telephone Consumer Protection Act (TCPA). ORA provides tools for dealers to record consent and to honor opt-out requests (for example, replying STOP) and per-dealer do-not-contact lists.
05 How we share information
We share information with service providers that help us run the platform — including cloud hosting and messaging, email, and voice delivery providers — which are bound by confidentiality and data-protection obligations and may use the information only to provide services to us. We share information with Meta only as needed to operate the social features through their APIs. We may also disclose information when required by law or in connection with a business transfer. A current list of sub-processors is available on request.
06 Facebook and Instagram information
When a dealer connects a Facebook Page or Instagram account, ORA receives public comment content and the identifiers required to associate a comment with the connected account and to reply. We use this information solely to detect a relevant comment and respond on the dealer's behalf. We retain it only as long as needed to provide the service, and we delete it on request or when the connected account is disconnected. A dealer or user can revoke ORA's access at any time by disconnecting the account in ORA or by removing ORA in their Facebook or Instagram settings. See our Data Deletion page for how to request deletion.
07 Where information is stored
ORA stores Canadian dealers' information in a Canadian data region and US dealers' information in a US data region. Some service providers may process information in other countries under appropriate safeguards.
08 Data retention and security
We keep personal information for as long as needed to provide the service and as required by law, then delete or de-identify it. We protect information with technical and organizational safeguards, including encryption in transit, access controls, and audit logging. No method of transmission or storage is completely secure.
09 Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or limit the use of your personal information. If you are a dealer's customer, please contact the dealer first, as they control that information; you may also contact us and we will assist or route your request. To exercise your rights, email privacy@get-ora.ai.
10 Children
ORA is a business tool that is not directed to children, and we do not knowingly collect information from them.
11 Changes to this policy
We may update this policy from time to time. We will post the new date above and, where appropriate, notify dealers.
12 Contact us
ORA AI Inc. (Mamoth-Auto), Montréal, Quebec, Canada.
Privacy questions: privacy@get-ora.ai