Privacy Policy

Effective October 2, 2026

1. Who we are
2. What we collect
3. How we use it
4. Safety review of chats
5. Who we share it with
6. Cookies and analytics
7. How long we keep it
8. Security
9. Your choices and rights
10. Children
11. Where data is stored
12. Changes
13. Contact

1. Who we are

Orion Forge ("Orion Forge", "we", "us") runs the website at orionforge.chat and the Orion Forge app at soulscript.orionforge.chat (together, the "Service"). This policy explains what information we handle when you use the Service. Using the Service also means agreeing to our Terms of Service.

2. What we collect

Information you give us

• Account details: your email address and, if you sign in with Google, GitHub or Discord, the name and profile picture that service shares. Passwords are handled by our sign-in provider, Supabase; we never see them.
• Your content: the messages you send and the replies you receive, chat titles, custom agents and their instructions, knowledge notes, files and images you upload, voice recordings you submit for transcription, and images or videos you generate.
• Memories: the app can save facts from your conversations into a personal memory vault so agents remember context. Memories are deleted with your account, or on request.
• Settings: your preferences, agent configurations and, if you choose to connect them, your own AI provider API keys or email accounts (stored encrypted).
• Payments: when you buy credits, Stripe collects your payment details. We receive a record of the purchase (amount, date, Stripe customer ID and email), not your card number.
• Messages to us: anything you send us by email or feedback.

Information collected automatically

• Usage and billing records: which models and tools you use, token counts, costs, credit balance and history, and when you were last active.
• Technical data: IP address, browser and device type, and server logs, used for security, rate limiting and troubleshooting.
• Analytics: see Cookies and analytics.

Public demo

The no-sign-up demo sends your messages to an AI provider to generate replies. Demo conversations are not saved to an account; we may keep basic technical data such as IP address for rate limiting and abuse prevention.

3. How we use it

• To provide the Service: run your agents, generate replies, remember context, store your chats and settings, and sync them across your devices.
• To bill you: track credit usage and process purchases.
• To keep the Service safe: detect and prevent abuse, fraud, spam and violations of our Terms (see the next section).
• To improve and fix the Service: debug problems, understand which features are used, and plan improvements.
• To communicate with you: account, billing and important service notices.
• To meet legal obligations and enforce our Terms.

We do not use your private chats to train our own AI models, and we do not sell your personal information.

4. Safety review of chats

Chats and other content are stored on our servers in a form the operator can read. To keep the Service safe and lawful, the Orion Forge administrator may review accounts, chats, custom agents, uploads and usage, including with automated screening that flags messages that may involve self-harm, violence, weapons, sexual content involving minors, hate, fraud, hacking or similar harms. Flagged content is reviewed by a person. Access is limited to the administrator, protected by sign-in, and logged.

We may act on what we find: for example by contacting you, suspending or closing your account, removing content, or reporting it to law enforcement or the National Center for Missing & Exploited Children where the law requires or allows it. If a conversation suggests someone may be at risk of serious harm, we may reach out or share information with emergency services.

5. Who we share it with

We share information only as needed to run the Service, with these kinds of providers:

If you connect your own API key or email account, requests made with it go to that provider under your own account with them. We may also disclose information if required by law, to protect the rights, safety or property of users, the public or Orion Forge, or as part of a merger, sale or transfer of the Service (in which case this policy will continue to apply to your information).

6. Cookies and analytics

We use cookies and similar storage to keep you signed in and remember your preferences. We also use Google Analytics and the Reddit Pixel to understand how people find and use the Service and to measure our advertising. These services may set their own cookies and receive your IP address and browser details. You can block or delete cookies in your browser, and Google offers an opt-out add-on.

7. How long we keep it

• Your account content is kept while your account is active, until you delete it or ask us to.
• Deleted agents go to a trash folder for 30 days, then are removed.
• Accounts with no activity for 12 months may be deleted along with their data.
• Billing records are kept as long as needed for tax and accounting, and content tied to a safety or legal matter may be kept as long as that matter requires.
• Backups and logs may take a short additional period to roll over.

8. Security

Data is sent over HTTPS, stored API keys and email credentials are encrypted, and each user's data is kept in a separate area of our storage. No system is perfectly secure, so we can't guarantee absolute security. Please don't share information in chats that you wouldn't want stored, such as passwords or financial account numbers.

9. Your choices and rights

• You can view, edit and delete your chats, notes and custom agents in the app.
• You can ask us for a copy of your data, to correct it, or to delete your account and all associated data by emailing us (see Contact). We'll respond within 30 days.
• Depending on where you live (for example the EU, UK or California), you may have additional rights, such as to object to or restrict certain processing or to complain to a data protection authority. We'll honour those rights as the law requires. We don't sell or "share" personal information for cross-context behavioural advertising as defined by California law, other than the analytics and ad measurement described above.

10. Children

The Service is for adults aged 18 and over. We don't knowingly collect information from anyone under 18. If you believe a minor is using the Service, contact us and we'll delete the account.

11. Where data is stored

Our servers are in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States and in the countries where our providers operate.

12. Changes

We may update this policy. If we make material changes we'll update the date above and, where appropriate, notify you in the app or by email before they take effect.

13. Contact

Questions or requests about your data: {{CONTACT_EMAIL}}.