Privacy Policy

1. Introduction

This Privacy Policy describes how Orlixa ("Orlixa", "we", "us") collects, uses, and shares information when you use our website and the Orlixa AI Workforce Platform (together, the "Service"). It applies to visitors of our marketing site and to customers using the product.

2. Information we collect

• Account information — name, work email, company name, and password (stored as a salted hash, never in plain text) when you register.
• Content you provide — knowledge documents, workflow definitions, connected-tool configuration, and messages exchanged with an AI Employee, so the Service can operate the way you've configured it.
• Usage data — pages viewed, features used, and basic device/browser information, used to operate and improve the Service.
• Connected-account credentials — where you connect a third-party tool (e.g. Slack, Gmail, HubSpot), we store the access token or credential needed to act on your behalf, encrypted at rest.

3. How we use information

We use the information above to:

• Provide, operate, and maintain the Service, including running your AI Employees and Workflows;
• Authenticate you and secure your account;
• Respond to support requests and communicate with you about the Service;
• Monitor and improve reliability, performance, and security;
• Comply with legal obligations.

We do not sell your personal information, and we do not use the content of your workspace to train models shared across other customers.

4. How we share information

We share information only as needed to provide the Service:

• AI providers — when you use an AI Employee, the messages, instructions, and documents involved in that conversation are sent to our AI provider (OpenAI or Anthropic, depending on configuration) so it can generate a response and decide what action to take.
• Payment processor — Stripe processes subscription payments on our behalf. We do not store your card details ourselves.
• Infrastructure providers — database, hosting, and email delivery, to run the Service.
• Third-party tools you connect — for example Slack, Gmail, Google Calendar, Google Drive, HubSpot, or Jira. When you connect one, the AI Employee can act through it only using the specific permissions you granted during that connection (for example, sending an email on your behalf, or checking calendar availability) — never more than what you authorized, and only for the account you connected.

We do not share your workspace's data with other customers, and we do not sell personal information. We may disclose information if required by law or to protect the rights, property, or safety of Orlixa, our users, or the public.

5. Data security

We apply tenant isolation, role-based access control, and encryption at rest for sensitive fields (including connected-account credentials). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. See our Security page for more detail on what's actually implemented.

6. Data retention

We retain account and workspace information for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account data by contacting us.

7. Your choices

You can access, correct, or request deletion of your personal information by contacting us at the address below. You can disconnect a third-party tool at any time from your workspace settings, which stops Orlixa from acting on your behalf through that tool.

8. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above when we do, and material changes will be communicated to active customers.

9. Contact us

Questions about this policy? Email privacy@orlixa.io.