1. Scope
This Privacy Policy applies to Orchesly websites, applications, collaborative workspaces, support interactions, and related services that link to it. It does not govern third-party services that have their own privacy terms.
2. Information we collect
We may collect account and authentication details such as name, email address, profile image, provider identifiers, session and security records; user content such as boards, diagrams, prompts, files, comments, and collaboration activity; usage, device, browser, network, diagnostic, and log data; and information you provide when requesting support.
3. Google, Microsoft, and OAuth data
When you sign in with Google or Microsoft, Orchesly receives only the account and authorization data made available by the provider and the permissions you approve. Orchesly's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Orchesly does not sell personal information and does not use Google, Microsoft, or other OAuth data for advertising.
4. How we use information
We use information to authenticate users; provide, secure, maintain, troubleshoot, and improve Orchesly; save and synchronize content; enable collaboration; respond to support requests; prevent abuse; comply with law; and communicate service, security, and account information.
5. AI processing
When you use AI features, relevant prompts, selected workspace context, attachments, and generated results may be processed by AI model and infrastructure providers acting for Orchesly. We limit the data sent to what is reasonably needed for the requested feature, but you should not submit information you are not authorized to process.
7. Retention and deletion
We retain information for as long as reasonably necessary to provide the service, maintain security and continuity, meet legal or contractual obligations, resolve disputes, and enforce agreements. Retention varies by data type and context. Deletion requests may be subject to verification, backups, legal holds, fraud prevention, and records that must or may lawfully be retained.
8. Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls and protected transmission where appropriate. No system is completely secure, and Orchesly cannot guarantee that information will never be accessed, lost, altered, or disclosed.
9. Your choices and rights
Depending on your location and relationship with Orchesly, you may request access, correction, export, restriction, objection, or deletion of personal information, and may disconnect an OAuth provider through that provider or your account settings. Some requests require identity verification and may be limited by applicable law or the rights of others.
10. International processing
Orchesly and its service providers may process information in countries other than the one where you live. Data protection laws may differ, and where required we use appropriate mechanisms for international transfers.
11. Children
Orchesly is not directed to children who cannot lawfully consent to use the service in their location, and we do not knowingly seek their personal information. If you believe a child has provided information improperly, contact us so the matter can be reviewed.
12. Changes to this policy
We may update this policy as Orchesly, our practices, or applicable requirements change. We will post the updated version and revise the date above; when appropriate, we may provide additional notice.
13. Contact
For privacy questions or to exercise a privacy right, use the support or contact channel published in Orchesly or provided by the organization that gave you access. Please describe your request and the account or workspace involved; do not include passwords or unnecessary sensitive information.