Who we are
Orin AI Inc. (“Orin,” “we,” “us,” or “our”) provides an AI-powered business assistant that can help you manage communications, calendar activity, browser tasks, and related workflows. This policy applies to the Orin website, applications, and services.
Information we collect
- Account and contact information, including your name, phone number, email address, profile details, and sign-in records.
- Content and instructions you provide to Orin, including chat messages, files, saved preferences, task history, and information required to complete a requested action.
- Data from services you choose to connect, such as Google Workspace or Microsoft 365, only after you grant permission.
- Technical and usage data such as device and browser information, IP address, logs, diagnostics, and security events.
Google user data
If you connect Google Workspace, Orin requests your Google account email address and permission to work with Gmail messages, threads, drafts, labels, and sending actions, plus Google Calendar events and free/busy information. Orin uses this data only to provide features you request, such as finding or organizing email, drafting or sending a message, checking availability, or creating and updating calendar events.
Google access and refresh tokens are encrypted at rest. Relevant Google data may be sent to infrastructure and AI service providers acting on our behalf when needed to complete your request. We do not sell Google user data, use it for advertising, use it to determine creditworthiness, or use it to train generalized AI or machine learning models.
Humans do not read Google user data unless you give affirmative permission for a specific support or troubleshooting purpose, access is necessary to investigate abuse or a security incident, we are required to do so by law, or the data has been aggregated and anonymized for internal operations.
Orin’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Microsoft 365 data
If you connect Microsoft 365, Orin requests your Microsoft account identity and delegated access to Outlook Mail and Calendar. Orin uses that access only to perform requests such as finding or organizing email, sending a message, checking availability, and creating or deleting calendar events.
Microsoft access and refresh tokens are encrypted at rest. Relevant Microsoft 365 data may be processed by infrastructure and AI service providers acting on our behalf only when needed to complete your request. You can disconnect the account at any time from Workspace.
Orin Chrome extension
The optional Orin extension for Chrome lets you copy the website sign-ins you choose from Chrome to Orin, so Orin’s browser can work on those sites as you without your password. To do this, the extension has Chrome’s cookies permission and access to all sites, because a sign-in is kept in the cookies of the site you logged into. The extension only responds to requests from Orin’s own website.
- When you open the import screen in Orin, the extension reads cookie details in Chrome to list the sites you appear to be signed into. That list is shown to you on the Orin page in your browser and is not sent to our servers.
- Cookie values leave Chrome only for the sites you select and then approve in the extension’s own window. They are sent over an encrypted connection to Orin and placed into a private, encrypted browser profile that belongs only to your workspace.
- Orin stores the names of the imported sites and when you imported them so you can see and manage them. We do not store the cookie values in our own database or write them to our logs.
- The extension never reads your passwords, and it does not collect your browsing history, page content, keystrokes, or analytics. It does not load or run remote code.
- You can remove a site, or sign out of all sites at once, from Logins in the Vault. You can also uninstall the extension at any time.
We use this data only to let Orin’s browser act on your behalf on the sites you chose. We do not sell it, use it for advertising, or use it to train generalized AI or machine learning models. Orin’s use of information received from the extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Read more about how your sign-ins are stored.
How we use information
- Provide, operate, personalize, and improve the service.
- Carry out the actions you request and show you the results.
- Authenticate accounts and protect Orin and its users.
- Respond to support requests and service communications.
- Comply with law and enforce our Terms of Service.
How we share information
We share information only as needed with vendors that provide hosting, databases, authentication, communications, browser execution, analytics, security, AI inference, and customer support; with third-party services when you direct Orin to interact with them; in a corporate transaction; or when required to protect rights, safety, and comply with law. Service providers may use the data only to provide contracted services to us. We do not sell personal data.
Retention and deletion
We retain information only for as long as needed to provide Orin, meet legitimate operational and security needs, and comply with law. Some Google-derived information may appear in chat or task history when it is part of a request or result. Disconnecting Google deletes the stored Google tokens from Orin and asks Google to revoke the grant. You can also revoke access in your Google Account settings.
You may request access, correction, export, or deletion of your personal data by emailing privacy@orin.so. We may need to verify your identity before completing a request. Limited records may be retained where required for security, legal, or compliance reasons.
Security and international processing
We use administrative, technical, and organizational safeguards designed to protect personal data. No method of storage or transmission is completely secure. Orin and its service providers may process information in the United States and other countries where they operate, subject to applicable safeguards.
Children and changes to this policy
Orin is not directed to children under 13, and we do not knowingly collect their personal data. We may update this policy as the service changes. We will post the revised policy here and update the date above; material changes may also be communicated through the service.
Contact us
Questions or privacy requests can be sent to Orin AI Inc. at privacy@orin.so.