Privacy policy
Last updated 16 October 2026
What is in here
Two different things. Your own account - your name, email and password - and your organisation’s HR records: staff names, ID card numbers, dates of birth, contact details, salaries, attendance, leave, documents you upload, and job applications people send you.
Who it belongs to
The HR records belong to your organisation. You decide what goes in and what comes out. We hold it for you, we do not own it.
Who can see it
People in your own organisation, according to the login you give them. Staff see only their own records. A manager sees the people who report to them (their own team) - work details only, and private details such as salary or bank only if your Company Policy allows it. A Director login sees the overview and payroll totals (each person’s pay only if you allow it). A Payroll / Finance login sees what payroll needs. HR sees everything. This is enforced by the database and the server, so it holds even if somebody finds a way around a screen.
What Samuga Creative can see
That your organisation exists, how many staff you have, when somebody last used it, and whether you have run payroll. Not names, not salaries, not leave, not documents. If you ask us for help and want us to look at something specific, you can tell us - but we do not go looking.
Where it is kept, and who helps us run ORYS
Supabase - the database and uploaded files, in a data centre in Mumbai, India. Railway - the app server, in Singapore. Resend - sends ORYS’s emails (the address and the message). DeepSeek - answers ORUS questions, cleaned first as described below. Cloudflare - the “are you a person” check on public forms. Telegram - only for people who link their own Telegram to ORYS: their ORYS notifications are sent there as short messages (by default just the title, with a button to open ORYS); anyone can stop them with /stop, and a company can switch Telegram off. GitHub - keeps our encrypted nightly backups (locked with a passphrase only Samuga holds). None of them is given permission to use your records for anything else.
The AI help
ORUS answers questions about using ORYS. To give a useful answer it is sent the question (cleaned first) and a few plain facts: how ORYS works, the asking person’s own leave left, their role and job title, and your company’s rules (for example approval steps and leave types). It is never sent names (of people or your company), ID or passport numbers, salaries or bank details - ORYS checks every request before it leaves and stops it if anything like that is in it. HR can switch ORUS off for the whole company in Company Policy.
How long we keep it
For as long as your organisation uses ORYS, and for a reasonable period afterwards so you can get your data out. Ask us to delete it and we will, once you have your copy.
Job applicants
If you use the careers page, people who apply are sending their details to your organisation, not to us. Their application is visible only to your HR. Their CV opens through a link that expires after five minutes.
Your rights
Ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to support@samugacreative.com. For the HR records, ask your own HR - it is their system, not ours.
Anything unclear? hello@samugacreative.com · +960 766-6003