1. Information we collect
We collect the following categories of information:
- Account information — name, email address, and authentication details, managed through our identity provider (Clerk). If you sign up with Google, we receive your basic profile and email from that provider.
- Billing information — plan, credit balance, and transaction history. Card payments are processed by Stripe; we never store full card numbers on our servers.
- Content you create — agents and their configuration (prompts, instructions, tools), knowledge-base documents you upload, and the messages and data exchanged with your agents.
- Credentials you provide — API keys you generate, third-party provider keys you add (Bring Your Own Key), and OAuth tokens for integrations you connect. These are stored encrypted.
- Usage and technical data — log data, run metrics, IP address, browser type, and timestamps, used for security, billing, and analytics.
2. How we use your information
- Provide, operate, and maintain the Service and your agents.
- Process payments, manage credits, and enforce plan limits.
- Authenticate you and keep your account secure.
- Provide customer support and respond to your requests.
- Monitor, debug, and improve performance and reliability.
- Detect, prevent, and address fraud, abuse, and security incidents.
- Comply with legal obligations.
We do not sell your personal data, and we do not use the content of your agents or conversations to train our own models.
3. AI model processing
To generate responses, prompts and related content are sent to the AI model provider you select for a given agent (for example Anthropic, OpenAI, Google, Mistral, and others we route to). That provider processes the content under its own terms and privacy policy in order to return a response. When you use Bring Your Own Key, requests are made using your own provider account.
5. Third-party integrations
When you connect an integration (such as Slack, Notion, or Google), you authorize us via OAuth to access the specific data needed for that integration to function. We use those tokens only to provide the feature you enabled, and you can disconnect an integration at any time from your settings to revoke access.
6. Data retention
We retain your information for as long as your account is active or as needed to provide the Service. When you delete content or your account, we delete or anonymize the associated personal data within a reasonable period, except where we must retain it to comply with legal, accounting, or security obligations.
7. Security
We use technical and organizational measures to protect your data, including encryption in transit, encryption of sensitive credentials at rest, access controls, and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Report any vulnerability to security@orqagent.com.
8. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can manage much of your data directly in the console, or contact us to exercise these rights. We will respond in accordance with applicable law.
9. International data transfers
Your data may be processed in countries other than your own, including where our service providers operate. When we transfer personal data internationally, we rely on appropriate safeguards as required by applicable law.
11. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
13. Contact us
If you have questions about this Privacy Policy or your data, contact us at hello@orqagent.com.