Privacy Policy

1. Scope

Orchid Office ("we," "our," or "us"), operated by Orchid Office Inc. (Delaware), provides a SaaS platform at orchidoffice.com. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, applications, and related services.

2. Information We Collect

• Account Data: Name, email address, authentication data, and organization/profile details.
• Customer Content: Business records you create or upload, including quotes, invoices, contact details, and notes.
• Billing Data: Subscription and payment metadata. Card processing is performed by payment providers (for example, Stripe); we do not store full payment card numbers.
• Technical and Usage Data: Device/browser information, IP-derived location, page/activity logs, diagnostics, and security telemetry.
• Support and Communications: Messages, support requests, and feedback submitted to us.

3. How We Use Your Information

• Provide, operate, secure, and improve the Service.
• Authenticate users and enforce access controls.
• Process subscriptions and payments and deliver service notices.
• Provide support, prevent abuse, and investigate incidents.
• Comply with legal obligations and enforce our Terms of Service.

4. Legal Bases and Processing Purposes

Where applicable law requires a legal basis (for example GDPR-style frameworks), we process personal information based on contract performance, legitimate interests (such as platform security and product improvement), legal obligations, and consent where required.

5. Sharing and Disclosures

We do not sell personal information. We may share information with:

• Infrastructure, hosting, authentication, communication, analytics, and payment processors acting as service providers.
• AI model providers only for requested AI-assisted features.
• Professional advisers, auditors, and legal authorities when required by law or to protect rights and safety.
• Successors in connection with a merger, acquisition, or asset transfer, subject to applicable confidentiality safeguards.

6. International Transfers

Your information may be processed in countries other than your own. Where required, we apply contractual and organizational safeguards for cross-border data transfers.

7. Data Retention

We retain personal information for as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and purpose.

8. Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, export, or object to certain processing of your personal information. To submit a request, contact us at info@orchidoffice.com.

9. Children's Privacy

The Service is not directed to children under 13 (or older age thresholds required by local law), and we do not knowingly collect personal information from children.

10. Security

We use technical and organizational safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring. See our Security page for additional details.

11. Updates to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.

12. Contact

Privacy inquiries: info@orchidoffice.com