Privacy Policy

• Account details. Your email address, and your name and profile picture if you sign in with Google or GitHub. If you sign up with email, we store a securely hashed password.
• Project content. What you write in Orgenix (direction, decisions, messages to the team) and the artifacts the team produces for your projects.
• Repository access. When you install the Orgenix GitHub App, we can read and write the repositories you choose, and only those. A free project's code is kept in a private repository in a GitHub organization Orgenix runs.
• Billing and credits. Your plan, hosting subscriptions, payment status, credit purchases, and a record of each AI charge (the run, the model, the tokens used, and the cost). Card details go directly to Stripe; we never see or store them.
• Build records. When Orgenix's agents build for you, we keep the build's logs and the agents' transcripts so we can show progress, check the work, and fix problems, for up to 180 days.
• Support requests. What you write in Help & support, the page you asked from, and any screenshot you attach.
• Hosted apps. If Orgenix hosts an app for you, the app's database, its users' accounts, and their files are stored in that app's own Supabase project, which Orgenix runs for you. See “Apps we host for you” below.
• Usage and technical data. Pages visited, aggregate analytics, and server logs needed to run and secure the service.

If you choose “Continue with Google” or “Continue with GitHub”, we request only your basic profile: name, email address, and profile picture. We use it to create your account, sign you in, and show who you are in the app. We do not request access to your Gmail, Drive, Calendar, or contacts.

Here is how we handle Google user data, in the order Google asks about it:

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• To provide the service: run your projects, open pull requests, host your apps, and show you results.
• To send account email, such as confirmations, password resets, updates on your projects, and notices about your hosted apps.
• To bill you for your plan, hosting, and AI credits.
• To answer your support requests.
• To keep the service secure and to fix problems.
• To send product news, only if you joined our list. Every message has an unsubscribe link.

We share data only with providers that run parts of the service for us, and only as much as each one needs:

• Supabase: sign-in and our database, and each hosted app's database, sign-in, and files.
• Vercel: hosting orgenix.ai and the apps we host, and aggregate site analytics.
• Google Cloud: the sandboxes where Orgenix's agents build, build logs and results, and Vertex AI, which runs the AI models for our agents and for hosted apps.
• GitHub: the repositories you connect, and the repositories we keep for free projects.
• Stripe: payments.
• Resend: sending email, including hosted apps' email from apps.orgenix.ai.
• AI model providers (such as Anthropic, through Google Cloud's Vertex AI, and Google, OpenAI, and Cursor): project content needed for the task at hand is sent to them to produce the team's work. If you use your own agents, it goes to the provider you chose.

We do not use your content to train AI models. Under the business terms we use them on, our AI providers don't train on it either. Google may keep prompts its abuse monitoring flags for up to 90 days.

We do not sell your personal information. We may disclose data if the law requires it.

Ori, the guide on our welcome page, can listen and speak. While the microphone is on, what you say is turned into text by a speech service: either OpenAI, through Orgenix, or your browser's own (Chrome, for example, uses Google). Ori's replies are read aloud with Google's text-to-speech, which receives the text of the reply. Orgenix does not store your audio; it keeps copies of Ori's spoken replies so the same line is not generated twice. You can turn the microphone and the voice off at any time; the page remembers the microphone choice for the browser tab.

When Orgenix hosts an app for a customer, the customer decides what the app collects from its users and why, and the customer's own privacy policy applies to them. Orgenix stores that data for the customer, in the app's own Supabase project, and uses it only to run, secure, fix, export, or delete the app, or where the law requires. Each app's data is kept apart from every other app's.

If you use an app built with Orgenix and have a question about your data in it, contact the app's owner. We will help them answer.

We keep your data while your account is active. Work the team committed to your repositories stays in your repositories, under your control.

• Erasing your account. When you erase your account and confirm, we delete your account, its personal data, and its hosted apps with their data straight away. We keep invoice records without personal details, as the law requires, and Stripe keeps its own payment records under its policies.
• Hosted apps that stop. When hosting ends or stays unpaid, the app pauses and its data is kept for 30 days, so you can resume it or export the data. We email you when it pauses and 23 and 29 days later. On day 30 we delete the app and its data.
• Build logs and transcripts. We keep the logs of each build and the agents' transcripts for 180 days, then delete them.
• Accounts we close. If we close an account for non-payment or abuse, we keep its records until billing is settled, then erase its personal data.
• Backups. Deleted data can remain in our database backups until they expire (currently up to 7 days).

You can ask us for a copy of your data, to correct it, or to delete it, including the data of an app we host for you. You can uninstall the GitHub App at any time from your GitHub settings, and revoke Google access from your Google Account. Write to t@orgenix.ai, or, signed in, use Help & support.

Data is encrypted in transit, access to production systems is limited, and provider credentials are stored as secrets. Agents build in isolated sandboxes that hold no customer production secrets. No system is perfectly secure; tell us at t@orgenix.ai if you find a problem.

Orgenix is not directed to children under 16, and we do not knowingly collect their data.

If we change this policy we will update the date above, and for significant changes we will tell you by email or in the app.

Questions about privacy: t@orgenix.ai.