Privacypolicy.

What we collect

• Account: your name, email address, a hash of your password (or your Google account ID if you sign in with Google), and the boxes and teams you belong to.
• Billing: your plan, subscription status and invoices. Card details go to Polar, our merchant of record, and never reach us.
• Your box: the files, projects and agent conversations you create there. They stay on your box.
• Service logs: sign-ins, box status and errors, with IP addresses, kept to run and secure the service.

Why

To provide the service you signed up for (contract), to take payment and meet tax and accounting duties (legal obligation), and to keep Orkio secure and working (legitimate interest). We don't sell your data, show ads, or use your code or conversations to train models.

Who else processes it

• Polar (polar.sh): payments, invoices and tax, as merchant of record.
• Our hosting provider: servers in the European Union run the website, the panel and your boxes.
• Google: only if you choose "Continue with Google".
• Model providers you connect (Anthropic, OpenAI and others): agents on your box send them your prompts and the code they work on, under your own account and their terms.

How long we keep it

• Your account, as long as you have it. Ask us to delete it and we do within 30 days.
• A box's files, until 30 days after its subscription ends; then the box is deleted.
• Database backups, 14 days. Invoices, as long as tax law requires.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, and take it elsewhere. Write to support@orkio.si; we answer within 30 days. You can also complain to the data protection authority where you live.

Cookies

We use only what signing in needs: a session cookie on hub.orkio.si and your session in the app's local storage. No tracking or advertising cookies.