Privacy Policy

Introduction

OrcheSight ("we," "us," or "our") is committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, share, and protect information when you use our intelligence and investigation management platform (the "Service").

This policy applies to all users of OrcheSight, including website visitors, account holders, and organizational administrators. By using the Service, you consent to the data practices described in this policy.

Information We Collect

Account Information

• Name, email address, and contact information
• Organization name and role
• Authentication credentials
• Billing and payment information

Usage Data

• Device information, browser type, and IP address
• Pages visited, features used, and interaction patterns
• Error logs and performance data

Investigation Data

Data you upload, create, or process within the Service is Your Content. We process it only as necessary to provide the Service. We do not access, review, or use Your Content for advertising or any purpose beyond providing and improving the Service.

How We Use Your Information

• To provide, maintain, and improve the Service
• To authenticate users and manage accounts
• To process payments and manage subscriptions
• To send service-related communications
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations
• To provide customer support

Data Sharing

We do not sell your personal data. We share information only in these cases:

• Service Providers: Trusted partners who assist in providing the Service (hosting, analytics, payment processing)
• Legal Requirements: When required by law, subpoena, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

Data Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, regular security audits, and incident response procedures. For air-gapped deployments, all data remains within your infrastructure with zero external transmission.

Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we provide 30 days to export your data, after which it may be permanently deleted. We retain certain data as required by legal obligations.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at [email protected].

International Transfers

For SaaS deployments, data may be processed in Microsoft Azure regions. We ensure appropriate safeguards for international data transfers in compliance with GDPR and applicable data protection laws.

Cookies and Tracking

We use essential cookies required for the Service to function. We do not use third-party advertising cookies. Analytics cookies are used only to improve the Service and can be disabled in your browser settings.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last Updated" date. Your continued use of the Service constitutes acceptance of the updated policy.

Contact Us