Privacy Policy

This Privacy Policy describes how Orch ("we," "us," "our") collects, uses, and protects information when you use the Orch desktop application and related services at orch.live.

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our Services.

We are committed to compliance with applicable privacy laws including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Google's API Services User Data Policy.

2.1 Information You Provide Directly

• Google Account Information: When you sign in with Google OAuth, we receive your name, email address, and profile picture from Google. This is used solely to create and identify your Orch account and allocate your monthly free credits.
• Support Communications: If you contact us at sameer@orch.live, we receive the content of your messages.

2.2 Information Collected Automatically

• Usage Metrics: We collect aggregate usage metrics including credit consumption, feature counts, and error logs to maintain service stability and manage compute allocations.
• Device Metadata: Basic metadata (OS version, system architecture, desktop app version) to ensure compatibility.
• IP Address: Processed for security, fraud prevention, and API rate limiting.

2.3 What We Do NOT Collect

• Unauthorised filesystem access — Orch only reads or modifies files in directories you explicitly open or grant access to.
• Browsing history outside of active agent execution sessions.
• Payment information — no credit cards are required or processed.

We use the information we collect for the following purposes:

• To provide, maintain, and operate the Orch AI desktop agent
• To authenticate you and manage your account via Google OAuth
• To allocate, track, and reset your monthly $50 compute credits
• To respond to support inquiries
• To detect and prevent security incidents, fraud, and abuse
• To comply with legal obligations

Orch uses Google OAuth 2.0 for authentication. Our use of Google account information complies with the Google API Services User Data Policy, including the Limited Use requirements.

We request only standard authentication scopes (openid, email, profile). You may revoke Orch's access at any time via your Google Account permissions.

We do not sell, rent, or trade your personal information. We share data only with cloud infrastructure and AI model providers necessary to process server-side AI requests, bound by strict confidentiality and privacy agreements.

We retain account and usage data only as long as necessary to provide the Service. You can request complete account deletion at any time by emailing sameer@orch.live.

You have the right to access, correct, export, or delete your personal data. Contact us at sameer@orch.live to exercise your rights.

We implement TLS encryption for all data in transit, encrypted storage for backend data, and secure Google OAuth 2.0 authentication.

Our Services are not directed to children under 13. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy periodically. Material changes will be posted on this page with an updated effective date.

For any privacy-related inquiries, contact us at: