Privacy Policy

1. Introduction

Mindscape Ventures LLC ("we", "us", "our") operates the orqo platform at orqo.ooopps.com. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. If you sign in via a third-party provider (Google, GitHub), we receive your name and email from that provider.

Usage Data

We collect information about how you interact with our platform, including workflow executions, API calls, and feature usage. This data is used to provide the service and improve performance.

Content You Provide

We store documents, workflow configurations, agent instructions, and other content you upload or create on the platform. This content belongs to your organization and is used solely to provide the service.

Communication Data

When you connect messaging platforms (Slack, WhatsApp, Email, Telegram), we process messages routed through our platform to deliver AI-assisted responses. Messages are processed in real time and stored as part of conversation history.

3. How We Use Your Information

• To provide, maintain, and improve the orqo platform
• To process AI workflow executions and deliver results
• To route messages between external platforms and AI agents
• To manage your account and organization membership
• To send service-related notifications (account verification, password reset)
• To monitor usage for billing and capacity planning

4. Third-Party Services

orqo integrates with third-party AI model providers (OpenAI, Anthropic, Google) to process your workflows. When you configure an LLM provider, your prompts and content are sent to that provider according to their respective privacy policies. You provide your own API keys for these services.

We use DigitalOcean for hosting and storage. Files and documents are stored in DigitalOcean Spaces (S3-compatible object storage).

5. Data Security

We implement industry-standard security measures to protect your data:

• All data is transmitted over HTTPS/TLS
• API credentials are encrypted at rest
• Multi-tenant data isolation ensures organizations cannot access each other's data
• Webhook signatures are verified using HMAC-SHA256

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your personal information and organization data. Workflow execution logs may be retained in anonymized form for service improvement.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account and associated data — see our Data Deletion instructions
• Export your documents and workflow configurations

8. Cookies

We use session cookies to maintain your authenticated session. We do not use third-party tracking cookies or advertising pixels.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact

For privacy-related inquiries, contact us at privacy@ooopps.com.