Privacy Policy

What we collect. Your email address (account identity and sign-in codes), hashed API keys and OAuth tokens (never plaintext), per-call metering records (tool name, credits charged, latency, timestamp, status), and billing state (plan, credit balance, order references from Polar). Sign-in is by emailed one-time code — we never store passwords.

What we don't collect. We don't store your search queries or extracted page content beyond what is needed to serve the live request. No advertising trackers, no third-party analytics on this site, no sale of any data to anyone.

Processors we rely on. Search queries are executed against an upstream search provider under our account (they see the query, not your identity). Payments are processed entirely by Polar as merchant of record — we never see card numbers. Sign-in and receipt emails are sent through our own mail provider.

Retention. Metering records are kept for billing accuracy and abuse prevention. Account deletion: email us and we remove your account, keys, and personal data, keeping only the minimal ledger entries required for tax/billing records held by the merchant of record.

Security. Credentials are stored as SHA-256 hashes; transport is TLS-only; webhook payloads are signature-verified; infrastructure lives on a single provider (EU/US hosting) with nightly encrypted backups.

Contact. admin@orchis.ai.