This text is a draft under legal review and is not yet in force. It describes how we intend to work at launch.

This policy explains how Orchec (“we”) handles personal data on orchec.com and in the Orchec service. For data you process on your own servers through Orchec, you are the controller and we act as your processor under the data processing agreement.

What we collect

Waitlist and demo requests. Your email address, and optionally your name, company, role, team size, number of servers, the plan or topic you are interested in, the times and time zone that suit you, and any message you write.

Accounts (after launch). Your name, email address, sign-in methods (passwords are stored only as hashes; passkeys and two-factor secrets are protected), organization membership, and billing details handled by Stripe. We never see full card numbers.

Service data. Records of actions in your account (the audit log), and the metrics, logs and configuration you ask Orchec to collect from your servers. Secret values are masked before storage in logs and never sent to AI models.

Website analytics. We use Vercel Web Analytics, which is cookieless and does not identify you. orchec.com sets no cookies and loads no third-party scripts.

Why we use it

To answer your demo request and send your waitlist invite.
To run, secure and support the Service you use.
To bill paid plans and meet tax and accounting duties.
To understand, in aggregate, how the site is used.

We do not sell personal data, and we do not use your data or Customer Data to train AI models.

Who we share it with

Only the providers that help us run Orchec, listed on the subprocessors page. For the waitlist and demo requests, that is Resend (email) and Vercel (hosting).

How long we keep it

Waitlist and demo requests: until 12 months after the public launch, or until you ask us to delete them.
Account data: while your account is open, then 90 days after it closes.
Billing records: as long as tax law requires.
Metrics, logs and audit records: for the retention period of your plan.

Your rights

You can ask to see, correct, export or delete your personal data, or object to how we use it, by emailing privacy@orchec.com. We reply within 30 days. You can also complain to your local data protection authority.

Security

See our security page for how we protect data, including encryption, access control and audit logging.

Changes

We will post changes here and update the date above. For material changes, we will email account owners.

Contact: privacy@orchec.com.

Privacy policy