Privacy Policy

Who we are

Orchard Platform, Inc. ("Orchard", "we", "us") builds a warehouse of reconciled records from the SaaS tools a business already uses, and makes it available over SQL, MCP, and a REST API. This policy covers runorchard.com, the Orchard console, and the Orchard APIs (together, the "Service").

What we collect

• Information you give us. Your work email when you request early access, and your name, company, and billing details if you create an account.
• Usage information. Pages viewed, buttons clicked, device and browser type, approximate location from IP address, and referring site. We collect this with Google Analytics and PostHog.
• Data from tools you connect. Records from tools you authorize, such as your CRM, billing, accounting, and support systems. See Connected tool data.
• Communications. Messages you send us, and whether you open emails we send.

How we use it

• To run the Service: sync, match, and serve your records, and authenticate your keys.
• To contact you about early access, your account, and changes to the Service.
• To understand how the site and Service are used so we can improve them.
• To keep the Service secure and to meet legal obligations.

We do not sell personal information, and we do not use your connected tool data to train models or for advertising.

Connected tool data

When you connect a tool, Orchard reads the objects you authorize and stores a reconciled copy in your workspace's warehouse. We process this data on your behalf and only to provide the Service to you. You decide which tools are connected, which collections exist, and who holds keys to them. Disconnecting a tool stops future syncs, and deleting a workspace deletes its warehouse.

Who we share it with

• Service providers that host infrastructure, send email, and provide analytics, under contracts that limit their use of the data to serving us.
• People and agents you authorize through scoped keys, MCP connections, or workspace access.
• Authorities when the law requires it, or to protect the rights and safety of Orchard, our users, or others.
• A successor if Orchard is involved in a merger, acquisition, or sale of assets, subject to this policy.

How long we keep it

We keep account and connected tool data while your workspace is active, and delete it within 30 days after you close the workspace, unless the law requires us to keep it longer. Early-access emails are kept until you ask us to remove them. Analytics data is kept in aggregate.

Security

Data is encrypted in transit and at rest. Access to production systems is limited to the people who need it. Keys can be scoped to a single collection and revoked at any time. No system is perfectly secure; if you find a vulnerability, write to [email protected].

Your choices and rights

You can ask to access, correct, export, or delete your personal information, or object to how we use it, by writing to [email protected]. Depending on where you live, laws such as the GDPR or CCPA may give you additional rights, and we will honor them. You can unsubscribe from emails with the link in any message, and block analytics cookies in your browser settings.

Changes

If we change this policy, we will update the date at the top. If a change is significant, we will tell account holders by email before it takes effect.

Contact

Orchard Platform, Inc., Seattle, Washington. [email protected]