Privacy Policy

1. Introduction

Orqis ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use the Orqis platform.

2. Information We Collect

We collect the following categories of information:

• ›Account information: email address and authentication data when you sign up
• ›Usage data: pages visited, features used, and interactions with the platform
• ›Agent configurations: API specs, tool settings, and prompts you create
• ›Billing information: processed securely through Stripe — we never store card details
• ›Communications: messages you send us via the contact form

3. How We Use Your Information

We use collected data to:

• ›Provide, maintain, and improve the Service
• ›Process payments and manage subscriptions
• ›Send transactional emails (account confirmation, password reset)
• ›Respond to support and contact requests
• ›Monitor for abuse, security incidents, and platform health

4. API Keys & Credentials

Any third-party API keys you provide are used solely to execute agent requests on your behalf. They are never stored in plaintext and never shared with third parties. API keys are stored securely using encryption and are only used to execute requests on your behalf.

5. Data Sharing

We do not sell your personal data. We may share data with the following service providers, who process data on our behalf and are contractually obligated to protect your information:

• ›Supabase — authentication and database hosting
• ›Stripe — payment processing
• ›Google / GitHub — only if you use OAuth sign-in

We may also disclose data to law enforcement when required by applicable law. We will notify you of such requests where legally permitted.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law.

7. Cookies

We use session cookies for authentication only. We do not use tracking cookies or third-party advertising cookies.

8. Your Rights

Depending on your location, you may have the right to:

• ›Access the personal data we hold about you
• ›Request correction of inaccurate data
• ›Request deletion of your account and data
• ›Object to or restrict certain processing
• ›Export your data in a portable format

To exercise any of these rights, contact us at safa.bkhadraoui@gmail.com.

9. AI & Data Usage

We are committed to full transparency about how AI is used in the platform:

• ›We do not use your API data, prompts, or agent configurations to train machine learning models
• ›We do not use your conversations or tool call history for model training
• ›Your data is never shared with AI model providers beyond what is required to execute your requests
• ›LLM calls are made on your behalf using your chosen model — responses are not retained by Orqis for training purposes

10. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed credentials, and access controls. No system is 100% secure — please use a strong, unique password for your account.

11. Children's Privacy

Orqis is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on the platform. Continued use of Orqis after changes constitutes acceptance.

13. Contact

For privacy-related questions or requests, contact us at safa.bkhadraoui@gmail.com.