Privacy Policy
Last updated November 3, 2026
The short version.
- What you and your agents put on Orgo is yours.
- We never sell it and never train AI models on it.
- Your agent keeps its memory and files on its own computer, and you can delete them at any time.
- We share data only with the companies that help us run Orgo, listed on our subprocessor page.
1 Information we collect
- Account information
Your name and email, provided when you sign up.
You sign in with a code we email you, or with Google, GitHub, Microsoft or Apple, so we do not store passwords.
- Billing information
Payments are processed by Stripe.
We keep a customer reference and your plan and usage records, but we never see or store full card numbers.
- Usage and telemetry
- API calls, computer lifecycle events (create, start, stop, delete), resource consumption, timestamps, and diagnostic logs used to operate, secure, and bill the Service.
- Content on your computers
The files, screenshots, and data your agents create or process inside your computers, including what an agent remembers about you.
This is your content, and we access it only as described in Your content and your computers.
- Chats and usage records
Chats are saved to your account so you can come back to them. Closing a chat on a computer deletes it. A workspace agent’s earlier conversations stay in its history until you delete them.
Each AI run, in Orgo, through our API, or in support chat, leaves a usage record: the model, tokens and cost, and up to the first 200 characters of the message that started the run. Usage records never keep the agent’s replies or attachments, and they are not shown to your workspace or through our API.
Zero data retention chats, where offered, save no messages, history or previews, only a billing record.
When an agent on your computer uses Orgo’s models, we record the usage and cost of each call, not its content.
- Connected apps
When you connect an app such as Gmail to a computer’s agent, the sign-in is stored for that one computer and held by our integration provider, Composio. An app you connect for a whole workspace or account can be used by every agent there.
Other computers in your workspace cannot use it, though a copy of that computer (a clone, a fork, or a backup restored as a new computer) may still reach the original’s apps.
Anyone who can use that computer, including view-only members, can ask its agent to use the app.
People who can edit the workspace can disconnect an app at any time, and when you delete a computer, we ask Composio to revoke the app sign-ins it made.
- Residential IPs
When you turn on a residential IP for a computer, its browser goes out through a home internet connection on our network provider’s network instead of our servers. While it is on, we record which residential IPs that computer had and when, and the names of the sites it reached each hour, with the number of connections, the amount of data, and the attempts that were refused.
We never record the pages you open or anything on them: a site name only, such as example.com, never a page address, what you type, or what comes back.
We keep this to answer abuse reports and to help you with support requests. Our network provider also keeps its own records of the traffic on its network, including the sites each Orgo account reaches, under its own terms, and it gives us its count of those sites for your account.
- Communications
- Messages you send us, such as support requests.
- Cookies and analytics
Essential cookies keep you signed in, and we use product analytics to understand how the Service is used and to improve it. We do not use advertising cookies.
Session recordings hide all text you see or type, never capture the live view of your computer, and pause completely while a zero data retention chat is on screen. Screenshots the agent shows in a regular chat can still appear in a recording.
2 How we use information
- Provide, operate, and maintain the Service.
- Authenticate you and keep your account secure.
- Process billing and usage-based charges.
- Detect, prevent, and investigate abuse, fraud, and security incidents.
- Debug, troubleshoot, and improve reliability and performance.
- Send you service, security, and account notices.
- Meet our legal and accounting obligations.
We do not sell your personal information, and we do not use the content on your computers, your chats, or your connected apps to train AI models.
3 Your content and your computers
You own your content. We claim no ownership of it, and we use it only to provide the Service to you (see our Terms of Service). You control what runs on your computers and what data they process. In the ordinary course of operating the Service, we do not monitor the contents of your computers. Automated systems act on operational signals such as resource usage and health, and on abuse signals. A computer using a residential IP is also covered by the record described under Information we collect.
We access the content inside your computers only when:
- you ask us to, for example to resolve a support request;
- it is necessary to operate, secure, or protect the integrity of the Service; or
- we are required to by law.
That access can include reading a computer’s logs and settings or viewing its screen, and we keep it to what the problem needs. See Data retention for what happens when you delete a computer.
5 Data retention
| What | How long |
|---|---|
| Account and billing records | While your account is active, and as needed for legal, accounting, and security purposes. |
| Computers | Their disks are kept until you delete them. Stopping a computer never deletes it. A computer you give an end time is deleted at that time. A computer billed by the hour from credit stops when the credit runs out, and it is deleted with its files 7 days later unless you add credit. |
| Daily backups | Kept for 7 days for a running computer. Its most recent backup is kept while the computer exists. |
| A deleted computer | It leaves your account at once, and its daily backups are erased within a few days. Some other copies, such as one taken at the moment of deletion, can stay in our storage longer. Ask us and we will erase them. |
| Chats on a computer | Until you close them. |
| A workspace agent’s earlier conversations | Until you delete them. |
| Zero data retention chats | Never saved. |
| Usage records, service logs, and screenshots that the Service makes | As long as we need them to operate, secure, and bill the Service. A usage record, with its message preview, stays after you delete the chat or computer it came from, as a billing record. |
| Residential IP records | The IPs a computer had and the sites it reached are kept for 30 days. If you delete the computer or your account, they stay until those 30 days are up. A block we place on residential access for your account is kept as a security record. Our network provider keeps its own records for as long as its terms say. |
| Your account | When you ask us to delete it, we sign you out everywhere, remove your API keys, and stop your plans from renewing right away. We then delete or de-identify associated personal data, typically within 30 days, except where longer retention is required by law. Files you added to a workspace someone else owns stay with that workspace. |
6 Security
- Every computer is isolated, with its own disk. Macs and phones are real devices, each used by one customer.
- Your connection to Orgo is encrypted with TLS, and browsers are told to always use HTTPS. Secrets you save, API keys, and computer screen passwords are encrypted before we store them.
- Access to production systems is restricted to authorized staff and requires authentication.
- We maintain administrative, technical, and organizational security controls designed to protect your data.
- Our servers are in the United States, and in London, United Kingdom, for computers that run there.
Enterprise customers who require a Data Processing Agreement (DPA) or additional security documentation can request one at privacy@orgo.ai. No system is perfectly secure, and we work continuously to protect your data; if you believe you have found a vulnerability, please report it to privacy@orgo.ai.
7 Your rights and choices
You can delete chats, computers, and your account yourself. You can download files from your computers and export your skills at any time, and you can ask us to access, correct, or export anything else. Depending on where you live, for example in the EEA, the UK, or California, you may have additional rights to access, correct, delete, port, restrict, or object to certain processing, and to not be discriminated against for exercising them. California residents: we do not sell or share personal information as those terms are defined under the CCPA.
To exercise any of these rights, contact privacy@orgo.ai. We will respond within the time required by applicable law.
8 International users
Orgo is based in the United States. Our servers are in the United States, and in London, United Kingdom, for computers that run there. If you use the Service from outside the United States, your information will be processed in the United States, and some subprocessors may process it in other regions under their own terms.
9 Children's privacy
The Service is not directed to children under 18, and we do not knowingly collect their personal information.
10 Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email or an in-product notice, and the “Last updated” date above will change. Continued use of the Service after changes take effect means you accept the updated policy.
11 Contact
Organic Intelligence, Inc. is a Delaware corporation with its principal place of business in San Francisco, California, United States.
Questions about privacy: privacy@orgo.ai.