We collect the minimum needed to run the Service:

• Account information: your email address and profile name, via our authentication provider (Auth0). We never see or store your password.
• Conversations and files: the messages you send, files you upload, and deliverables the agent generates for you.
• Billing status: your subscription plan and its state, via Stripe. We never see or store your card details.
• Usage events: anonymous product events (e.g. a page view, a checkout started) used to improve the funnel and the product.
• Your API keys (BYOK): if you connect your own AI-provider keys, they are stored encrypted at rest and used only to serve your own requests.

To answer your requests, your messages and files are sent to third-party AI model providers (such as Anthropic, OpenAI, Google, and others) under their API terms. API-submitted content is not used by these providers to train their models under their standard API terms.

Web research performed by the agent queries third-party search and scraping services with the search terms needed for your request, never with your identity.

Deliverables you generate (reports, websites, slide decks) are hosted at a shareable URL so you can send them to clients. Anyone with the link can view a deliverable, so treat the URL as the sharing control, and don't put content in a deliverable you wouldn't share with its audience.

• We never sell your personal data.
• We never use your content to train AI models.
• We never show your conversations or deliverables to other users.
• We never store your payment card details (Stripe does, as a PCI-compliant processor).

The Service is hosted on servers in the European Union (OVH, France). Conversation history and generated files are retained while your account is active so you can return to them; you can request deletion at any time (see below).

We use browser local storage for your login session and preferences (e.g. theme). Our authentication (Auth0) and payment (Stripe) providers set the cookies they need to function. We do not use third-party advertising trackers.

You can, at any time:

• Request a copy of the data we hold about you
• Request deletion of your account and all associated data (conversations, files, deliverables, stored keys)
• Remove your connected API keys instantly from the app
• Cancel your subscription (see the Terms of Service)

Send any such request to contact@ormind.ai and we respond within 30 days.

If we make material changes to this policy, we will post the updated version here and notify registered users by email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance.