Privacy Policy

Information we collect

• Account information, such as your name, email address, profile image, linked account identifiers, and authentication details.
• Content you provide, including messages, instructions, files, feedback, and organization or assistant settings.
• Usage and technical information, such as feature activity, timestamps, browser or device details, IP address, and diagnostic or security logs.
• Transaction information when you purchase a paid service. Payment providers process payment credentials on our behalf.

Google account and Workspace data

When you choose to sign in with Google, Orchestero accesses your unique Google account identifier, name, email address, email verification status, and profile image to authenticate you and connect your account. Google does not share your Google password with us.

When you choose to connect Google Workspace services, Orchestero requests access only to the services and permissions needed for the features you enable. Depending on those features and the permissions authorized for your account, Orchestero may access:

• Gmail messages, threads, headers, labels, attachments, drafts, and sending capabilities.
• Google Drive files, folders, metadata, permissions, and shared-drive content.
• Google Docs and Google Sheets content, structure, comments, and related file metadata.
• Google Slides presentations, slides, speaker notes, comments, media, and presentation elements.
• Google Forms content, including forms, quizzes, questions, settings, responses, and grades.
• Google Calendar calendars, events, attendees, invitations, and availability.
• Google Contacts and profile information available through Google People services.
• Google Tasks task lists, tasks, notes, due dates, and completion status.
• Google Keep notes, list items, attachments, and permissions when an eligible Google Workspace organization authorizes Keep API access.

How we use Google Workspace data

We use Google Workspace data only to provide and improve the user-facing assistant features you enable. At your request, or under instructions and automations you configure, your assistant may search, read, summarize, organize, draft, create, update, send, share, or delete data using the permissions authorized for your account. For example, an assistant may summarize email, draft and send a reply, organize Drive files, edit a document, spreadsheet, or presentation, create a form or review its responses, schedule a meeting, update a contact, manage a task, or work with Keep notes when available.

Google Workspace data may be processed by AI model providers and other service providers acting on our behalf when necessary to understand your request and complete the task you asked the assistant to perform. We limit those transfers to the data reasonably needed to provide the feature and require providers to process it for that purpose.

We do not sell Google Workspace data, use it for advertising, use it to determine creditworthiness, or use it to create, train, or improve generalized, shared, or personalized artificial intelligence or machine learning models. At your request, we may use Google Workspace data as temporary context for assistant features and may retain account-specific preferences or task outputs as described below, but we do not use the data to train the underlying models.

We do not allow humans to read Google Workspace data except when you give explicit consent for specific support, when necessary to investigate security or abuse, when required by law, or when data has been aggregated and anonymized for permitted internal operations.

We otherwise disclose Google Workspace data only to providers acting on our behalf to deliver the features you authorized, when required by law or necessary to protect the service, or when you direct us or give consent. We do not transfer Google Workspace data as part of a merger, acquisition, or sale of assets without your explicit prior consent.

Google data storage and controls

We may store your linked Google account identifier, basic profile information, granted permissions, and OAuth access or refresh tokens needed to maintain the connection. Google Workspace source content is accessed as needed for your assistant's tasks and may be temporarily cached only as necessary to provide the features you requested and in accordance with applicable Google cache controls. We do not create permanent copies of source content. At your direction, Orchestero may retain task outputs created for you, such as summaries, drafts, or files, where permitted by Google policy. Those outputs and other data derived from Google Workspace content remain subject to this policy and the deletion controls below.

You can stop future access to user-authorized Google services by revoking Orchestero from your Google Account permissions. For Google Keep or another connection authorized through domain-wide delegation, ask your Google Workspace administrator to remove Orchestero's authorization in the Google Admin console. Revocation stops future access for the affected authorization but does not automatically delete task results or information already stored in your Orchestero account. To request deletion of your Google data or Orchestero account, contact team@orchestero.com. After we verify your request, we delete the applicable data from active systems unless retention is required for legal, security, or fraud-prevention purposes. Residual copies may remain temporarily in backups until they are removed through normal retention cycles.

Orchestero's use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including its Limited Use requirements, and the Google Workspace API User Data and Developer Policy.

How we use information

We use information to:

• Provide, maintain, and personalize Orchestero.
• Authenticate accounts and protect the service from abuse.
• Process transactions and communicate about your account.
• Respond to support requests and improve service reliability.
• Comply with law and enforce our terms.

AI and messaging services

Orchestero relies on service providers to operate assistants. Content you send may be processed by AI model providers, hosting and storage providers, and the messaging services you choose to use. Those third parties may also maintain their own terms and privacy policies. Google Workspace data is shared and processed only as described in the Google-specific sections above.

How we share information

We may share information:

• With providers that help us operate and secure the service.
• With members of an organization according to its access settings. Google Workspace data and data derived from it are shared this way only when you direct us or give consent.
• When required by law or reasonably necessary to protect rights, safety, and the integrity of the service.
• As part of a merger, financing, acquisition, or transfer of assets, subject to applicable notice and consent requirements.
• When you direct us to share information or give consent.

We do not sell personal information or share it for cross-context behavioral advertising.

Retention

We retain information while your account is active and as needed to provide the service, meet legal obligations, resolve disputes, and protect the service. You may request deletion by contacting team@orchestero.com. Deleted information may remain in backups for a limited period before being removed through normal retention cycles.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system or transmission method is completely secure, so we cannot guarantee absolute security.

Your choices and rights

You can update certain account information from the product or ask us to access, correct, delete, restrict, or provide a copy of your personal information. Depending on where you live, you may also have rights to object to processing, withdraw consent, or complain to a data protection authority. We may need to verify your request before acting on it.

International processing

Orchestero and its providers may process information in countries other than where you live. Where required, we use appropriate safeguards for international transfers.

Children

Orchestero is not directed to children under 13, and we do not knowingly collect personal information from them. Contact us if you believe a child has provided personal information.

Changes to this policy

We may update this policy as Orchestero evolves. We will post the updated policy here and revise the date above. We will provide additional notice when a change materially affects your rights.

Contact

Questions or privacy requests can be sent to team@orchestero.com.