Privacy Policy

Orchata Labs - Effective Date: January 5, 2025

1. Introduction

Orchata Labs ("Orchata," "we," "us," or "our") operates a knowledge infrastructure platform that enables users to build and manage knowledge spaces for AI applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using Orchata, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect information such as your name, email address, and authentication credentials.

2.2 Content and Data

We collect and process the content you upload to create your knowledge spaces. This includes documents, text, and other materials you choose to integrate into the platform.

2.3 Third-Party Integrations

If you connect third-party services such as Google Drive, we access only the content you explicitly authorize. We retrieve documents and files solely to process them into your knowledge spaces as you direct.

3. How We Use Your Information

We use your information exclusively to provide, maintain, and improve our services. Specifically, we use your data to:

Process and index your content to build your knowledge spaces

Enable you to query and retrieve information from your knowledge spaces

Authenticate your identity and secure your account

Communicate with you about service updates and support

Improve and optimize our platform's performance

4. Data Usage Restrictions

We do not sell, rent, or trade your personal information or content to third parties. Your data is used solely to provide the services you have requested. We do not use your content to train machine learning models, for advertising purposes, or for any purpose other than delivering your knowledge spaces back to you.

5. Third-Party Services and Google Drive

5.1 Google Drive Integration

When you connect your Google Drive account, Orchata accesses only the files and folders you explicitly authorize. We use Google's OAuth 2.0 for secure authentication and request only the minimum permissions necessary to retrieve your selected content.

5.2 How We Handle Google Drive Data

Content retrieved from Google Drive is:

Processed solely to create and populate your knowledge spaces

Stored securely in your isolated tenant environment

Not shared with any third parties

Not used to train AI models or for any secondary purposes

Deleted upon your request or account termination

6. Data Retention and Deletion

6.1 Retention

We retain your data only for as long as necessary to provide our services or as required by law. Your content remains in your knowledge spaces until you choose to delete it.

6.2 Deletion

When you delete content from your knowledge spaces, it is permanently removed from our systems. This includes all processed data, embeddings, and any derived content. Deletion requests are processed promptly, and we do not retain copies of deleted content.

6.3 Account Termination

Upon account termination, all your data—including knowledge spaces, uploaded content, and account information—is permanently deleted from our systems within 30 days.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, secure authentication protocols, access controls, and regular security assessments. Each customer's data is isolated in a multi-tenant architecture designed to prevent unauthorized access.

8. Your Rights

You have the right to:

Access the personal information we hold about you

Request correction of inaccurate information

Request deletion of your data

Disconnect third-party integrations at any time

Export your data in a portable format

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the effective date. Your continued use of Orchata after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at support@orchata.ai.