Privacy

1. Information we collect

Anonymous app analytics

We automatically collect fully anonymized statistics about how the app is used, such as feature interactions, app versions, operating-system types, and performance measurements. These statistics help us understand which features are useful and where reliability or usability needs improvement.

Analytics do not contain your name, email address, source code, project files, file paths, prompts, terminal input or output, API keys, or other credentials. We do not use persistent user, device, or installation identifiers in analytics, retain IP addresses in analytics records, or link statistics to feedback or email subscriptions.

Anonymous website analytics

We collect anonymous statistics about page visits, download clicks, and other website interactions, together with broad browser and device information. We use these statistics to improve the website. Our website analytics do not use persistent visitor identifiers, advertising cookies, cross-site tracking, or session recordings.

Feedback, error reports, and support

When you submit feedback, send an error report, or contact us, we receive the information you provide. A report can include your message, app version, operating system, and diagnostic information you choose to attach. If you provide an email address, we can use it to reply.

Reports are sent when you choose to submit them. You can review diagnostic attachments and choose whether to include them with feedback. We redact known credentials and shorten local file paths in diagnostic attachments, but reports may still contain personal or work-related information. Voluntary reports are handled separately from anonymous analytics.

Release-notification emails

If you ask to be notified when a platform build is available, we collect your email address and the platform you selected. We use them to send the requested release notification. We do not add you to a newsletter or use that request for unrelated marketing.

Technical connection information

When your app or browser connects to our services, our infrastructure providers process connection information such as IP addresses, request times, browser or app details, and response status. This information is needed to deliver requests, investigate errors, and protect the services. Any operational logs are separate from anonymous usage statistics and are not used to build advertising profiles.

2. Your work and connected services

We do not upload your source code, project files, prompts, terminal contents, or API keys as part of automatic analytics. Workspace information stored locally by Orkestra remains under your control on your device.

Using a connected coding agent, AI provider, Telegram, or another integration can send information to the service you choose. The information shared depends on the integration, its permissions, and the actions you or your agents take. Those providers handle information under their own privacy policies. This policy covers information handled by Orkestra, including any content you choose to send us in a report.

3. How we use information

• Understand app and website usage, improve features, and evaluate performance.
• Investigate errors, fix bugs, and improve reliability.
• Respond to feedback and support requests.
• Send platform-release notifications you request.
• Keep our services secure, prevent abuse, and meet applicable legal obligations.

Where data-protection law requires a legal basis, we rely on your consent for requested release emails and on our legitimate interests in answering inquiries, resolving reported issues, and protecting our services, where those interests are not overridden by your rights. We rely on legal obligations where applicable and obtain consent where required by law.

4. Sharing and disclosure

We do not sell or rent your personal information, or share it for cross-context behavioral advertising.

We use service providers for hosting, analytics, report handling, and email delivery. They receive only the information needed to perform those services on our behalf and must protect it and use it for those purposes.

We may disclose information when required by law or when reasonably necessary to protect people, investigate abuse, or defend legal rights. We may also share information when you specifically ask or authorize us to do so.

Service providers may process information in locations different from where you live. Where applicable law requires safeguards for international transfers of personal information, we use the safeguards required by that law.

5. Data retention

We keep information only for as long as needed for the purpose described in this policy. Retention depends on the type of information, whether an issue remains open, security needs, and any applicable legal requirements.

• Anonymous statistics: retained while useful for understanding usage and improving Orkestra. We keep them anonymous and do not attempt to identify individuals from them.
• Feedback, reports, and support: retained while needed to investigate, resolve, and follow up on the issue.
• Release-notification emails: removed from the active notification list after the requested notice is sent or you withdraw your request. Limited delivery or suppression records may be kept where needed to honor your preferences or meet legal requirements.
• Operational logs: retained while needed for service delivery, troubleshooting, security, and abuse prevention.

When personal information is no longer needed, we delete it or irreversibly anonymize it, subject to any required legal retention. Copies in backups expire through the backup-retention cycle and are not used for ordinary operations.

6. Your choices and rights

App analytics. Anonymous app analytics is enabled by default. You can disable it in the app’s settings.

Website analytics. Anonymous website analytics is enabled by default. You can limit or block analytics requests using your browser’s tracking protection or a content blocker.

Reports. You decide whether to send feedback or an error report and whether to include optional diagnostic attachments. You can use Orkestra without submitting reports.

Release emails. You can withdraw a notification request at any time by contacting privacy@orkestra-a.de.

Depending on where you live and the laws that apply, you may have the right to access, correct, delete, or receive a copy of personal information we hold about you; object to or restrict its use; withdraw consent; or complain to your data-protection authority. Contact us to make a request. We may ask for information needed to verify that the request concerns your data.

Fully anonymous statistics cannot be linked back to a particular person. We cannot retrieve or delete an individual’s contribution from those statistics, and we do not collect additional identifying information to make that possible.

7. Security

We use reasonable technical and organizational measures to protect information from unauthorized access, loss, misuse, or disclosure, including limiting access to people and providers who need it. No method of internet transmission or electronic storage is completely secure.

8. Children’s privacy

Orkestra is a developer tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and delete it where appropriate.

9. Changes to this policy

We may update this policy as Orkestra develops or legal requirements change. We publish the updated version on this page and change the “Last updated” date. For material changes, we provide additional notice where required by law.

10. Contact

For privacy questions, requests about your personal information, or withdrawal of a release-notification request, contact the Orkestra team at privacy@orkestra-a.de.