Effective November 8, 2026.
Platformz operates OrcheSphere. This notice explains information processed through OrcheSphere accounts, company workspaces, connections and workflows. A customer agreement or data-processing agreement may specify additional responsibilities for that customer’s business data.
Information we process
- Account identity, contact information, identity-provider identifiers, company membership, roles and security settings.
- Company and provider account identifiers, connection settings, authorization tokens and other credentials needed for an approved integration.
- Encrypted browser profile or session material when you authorize a supported browser connection. Provider MFA can still require your participation.
- Instructions, job status, workflow checkpoints, results, approval decisions and audit records associated with work you authorize.
- Support requests, integration requests, subscription and payment references, and operational or security event records.
How information is used
We use this information to authenticate users, enforce company permissions, maintain authorized connections, run supported jobs, retain results, provide support, administer billing and investigate service or security problems. Public connection listings and marketing pages do not publish private account credentials or customer work records.
Company boundaries and administrators
Access depends on current identity and assigned rights. Company administrators manage their company’s users and authorized work. Assigned Platformz staff may administer multiple customer environments for delivery, support and security. Access to one customer workspace does not automatically grant another customer access to it.
AI services and connected providers
When you use an AI client or request work through a connected provider, information needed for that authorized interaction can be processed by that provider. Its own service terms and privacy settings also apply. Consider what information you include in instructions and which tools you authorize. A provider connection or AI client is not an unrestricted grant to publish or reuse customer records.
We do not sell customer workspace data. Use of business data for a new purpose, including a new AI processing feature, requires the applicable authorization, provider requirements and contractual basis.
Credentials and browser sessions
The service uses encrypted storage and server-side access controls for retained credentials and session material. OAuth providers generally handle their own password entry. Supported browser connections may require you to sign in interactively in an isolated browser. Do not send passwords, MFA codes, access tokens or recovery codes in ordinary support messages.
Revocation, provider expiration and security policies can invalidate retained authorization. We do not promise that stored sessions eliminate MFA or reauthorization. You can revoke provider access through that provider and request removal of retained connection material through your authorized administrator or support.
Hosting, billing and service providers
OrcheSphere uses AWS-hosted infrastructure in the United States and service providers for identity, delivery, security and communications. Payment collection uses Stripe-hosted payment services; the application retains subscription and payment references rather than collecting full card details in its own forms. Providers process information necessary for their service under their applicable terms.
Information may be disclosed when required by law, to address fraud or a security incident, or to operate the service under the applicable customer agreement. Cross-border processing can occur when you or your selected providers operate outside the United States.
Cookies, analytics and abuse prevention
Essential cookies and similar mechanisms maintain sign-in, security and user choices. Optional analytics on public pages follow the website’s consent controls; private workspace content and provider credentials are not public analytics events. Google reCAPTCHA can process technical information to help prevent abuse under Google’s Privacy Policy and Terms of Service.
Retention and your requests
Information is retained while needed for the authorized service, account administration, security, legal recordkeeping or an unresolved dispute. Jobs and audit history can outlast an individual chat session. Disconnecting a provider stops future authorized access but does not automatically delete previously retained results or cancel billing.
To request access, correction, export or deletion, contact [email protected] from your business account and identify the company and request. We verify identity and authority before acting, coordinate with the relevant company administrator where appropriate, and explain any required retention. Backup deletion follows the relevant backup lifecycle.
Security and updates
Read Security & trust for the current security controls and assurance status. No service can guarantee absolute security. Report suspected unauthorized access promptly without sending credentials. We update this notice when practices change and identify the effective date above.