Privacy Policy
Last updated October 26, 2026
This policy explains what ORQESTRA ("ORQESTRA", "we") collects when you use ORQESTRA, why, who helps us process it, and the choices you have. We don't sell your personal information, and we don't use it for advertising.
What we collect
- Account details: your name, email address and password (stored only as a secure hash by our authentication provider).
- What you add: your artist profile, links and numbers, releases, tasks, Knowledge Base documents, opportunities, answers and feedback you give your team.
- What your team produces: plans, drafts, recommendations and the records of each agent run, including how much it used.
- Track measurements: when you ask for feedback on a track, it's measured in your browser. The audio stays on your computer; only the measurements are sent.
- Billing: your plan and its status. Card details go directly to Stripe and Link; we never see or store them.
- Technical details: sign-in cookies that keep you signed in, and standard server logs (such as IP address and pages requested) used to keep ORQESTRA running and secure. We don't use advertising trackers.
- Website analytics: on our public pages (the homepage, these policies, sign-in and sign-up), Google Analytics records visits, such as the pages viewed, the site you came from, your device type and approximate location, so we can see how people find ORQESTRA. It doesn't run inside the app, so it never sees your work. In the EU, EEA, UK and Switzerland it counts visits without analytics cookies. You can block it in your browser's privacy settings or with Google's opt-out browser add-on.
How we use it
To run ORQESTRA for you and your team: doing the work you ask the agents for, sending sign-in and team emails, billing, keeping the service secure, and answering your questions. We use it for nothing else without asking you.
Who helps us
- Anthropic runs the AI models (Claude) that power the agents. The context a task needs is sent to Anthropic to do it. Under Anthropic's commercial terms, it isn't used to train their models.
- Web search: when Echo looks for opportunities, its search queries go to a search provider through Anthropic. Your private documents aren't included in searches.
- Supabase hosts our database, sign-in and file storage.
- Vercel hosts the ORQESTRA website.
- Google (Google Analytics) measures visits to our public pages.
- Stripe and Link handle payments, tax and receipts as merchant of record.
- Resend sends our emails.
Each processes data only to provide its service to us, under its own security and privacy commitments. Some are in the United States, so your information may be processed there.
Who else can see it
Your workspace is private to you and the people you invite. Everyone on a team sees that team's artist profile, releases, tasks and Knowledge Base. We may disclose information if the law requires it, or to protect people from harm.
How long we keep it
For as long as your account is open. When an account or workspace is deleted (ask us at support@orqestra.agency), its content is deleted from our systems, and from backups as they expire. We keep billing records as long as tax and accounting law requires.
Your choices and rights
You can see and change most of your information in ORQESTRA. You can also ask us for a copy of your data, to correct it, or to delete your account, by writing to support@orqestra.agency. Depending on where you live, you may have further rights, including to object to processing or complain to a data protection authority. We'll answer within 30 days.
Children
ORQESTRA isn't for anyone under 16, and we don't knowingly collect their information.
Changes
We'll tell you about material changes by email or in ORQESTRA before they take effect.
Contact
ORQESTRA: support@orqestra.agency.