Privacy Policy

Orquesta is operated by Forcast SpA, Santiago, Chile. For anything in this document, or to exercise any right described below, write to privacy@getorquesta.com.

Account data. Your email address, display name and profile picture, as supplied by Google when you sign in, plus the organization and projects you belong to.

Work data. The prompts you submit, the execution logs your agents report back, and metadata about each run: status, timing, token and cost counters, the git branch and commit it ran against, and any Linear issue you link.

Agent and device data. For each connected machine: a hostname, operating system, the CLI it runs, the working directory it was started in, and heartbeat times. Credentials issued to a device (agent, CLI, embed and API tokens) are stored only as a SHA-256 hash — we cannot read a token back out of our database.

Billing data. Subscription tier and usage counters. Card details go directly to Stripe and never reach our servers.

Support and outreach. Messages you send us, and delivery/open events for emails we send you.

• Your source code. Agents run on your own machines. Files are read and written locally; the repository is never uploaded to us. Only the prompt text and the output your agent chooses to report are transmitted.
• Your secrets, by default. The agent redacts recognized tokens, keys and credentials from log output before it is written to disk or sent to us. This is a best-effort filter, not a guarantee — treat it as defense in depth, not as permission to print secrets.
• Advertising or cross-site tracking identifiers. The mobile app contains no analytics, attribution or advertising SDK, and we do not sell or share personal data for advertising.

• To run the service: dispatch prompts to your agents and show you the results.
• To keep an audit trail of who ran what, which is the product's core purpose.
• To meter usage and bill the correct organization.
• To secure the platform: detect abuse, revoked credentials and anomalous access.
• To reply to you, and to send service notices about your account.

Where GDPR applies, our lawful bases are performance of a contract (running the service you signed up for), legitimate interests (security, abuse prevention, service improvement), and consent where we ask for it.

Running a prompt sends its text — and whatever context your agent includes — to a large language model. Which provider receives it depends on the engine configured for that project: Anthropic (Claude), OpenAI, DeepSeek, Moonshot AI (Kimi), or a model reached through Amazon Web Services. If you point Orquesta at your own endpoint (including a locally hosted model), the content goes there instead and no third-party provider is involved.

These providers process the content to return a completion. We do not authorize any of them to train models on your content.

• Google Cloud Platform — hosting and database infrastructure (US).
• Stripe — payment processing (US).
• Resend, Brevo — transactional and notification email.
• Anthropic, OpenAI, DeepSeek, Moonshot AI, Amazon Web Services — model inference, as described above.
• Linear — issue tracking, when you connect it to a project.

Our database is self-hosted on our own infrastructure in Google Cloud's US Central region rather than on a third-party managed platform. If you need a Data Processing Agreement, ask us.

Prompts, logs and run metadata are retained for the life of the project so the audit trail stays complete, and are deleted when you delete the project or close your account. Device tokens expire one year after issue and can be revoked at any time from the dashboard, from the mobile app's sign-out, or by asking us. Billing records are kept as long as tax and accounting law requires.

Deleting your account removes your profile, your organizations' projects, prompts and logs from our production database within 30 days. Encrypted backups roll off on their own schedule and are not selectively edited.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to withdraw consent. Email privacy@getorquesta.com and we will respond within 30 days. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Traffic is encrypted in transit with TLS. Stored credentials are hashed; provider keys and other secrets are encrypted at rest. Access to a project is enforced per user, and the tokens issued to devices carry only the access their holder already had. Agents can be run inside a filesystem sandbox that hides credential stores and can be cut off from the network entirely.

If you believe you have found a vulnerability, please report it to security@getorquesta.com before disclosing it publicly.

Orquesta is a tool for professional software teams and is not directed at anyone under 16. We do not knowingly collect data from children.

We will update this page when our practices change and move the “last updated” date. Material changes will also be announced by email to account owners.