Privacy Policy

Account details. When you sign up, our sign-in provider Clerk collects your email and name and gives us an account id.

Inputs and results. What you type or upload into a tool, and what the tool returns, are stored so your history and share links work. Photos you upload are held in our storage as well.

Incognito runs are left out of your history, so they do not appear in your past runs and cannot be shared. They are not erased everywhere yet: our own internal record of the request we sent the AI provider (which contains what you entered) and the result it returned is kept for cost and quality tracking, with nothing in it tying it to you or your account. We are working on making incognito leave nothing at all, and this page will say so plainly when it does. Until then, email [email protected] if you want an incognito run removed.

Usage. Pages visited, tools you looked at, which form fields you filled in before running, tools run, shares made, rough timing. Anonymous visitors get a random id in a cookie; signed-in usage is tied to your account. We use this to see what works and where people get stuck, not to profile you.

Where you came from. When you arrive from a link we posted or an ad we ran, we record the campaign tags on that link, the site that sent you (the domain, never the full address), and the page you landed on. That is how we tell which of our own efforts are worth continuing.

Problems. When something breaks, we log technical details about the failure so we can fix it. These logs are scrubbed of secrets and kept on a retention clock.

Orchard runs on a small set of services, each seeing only what it needs:

• Amazon Web Services hosts everything (US East).
• Clerk handles sign-in and stores your account credentials.
• AI providers (via OpenRouter, plus OpenAI, Anthropic, and Google) receive your run inputs to produce results. They process them under their own API terms. We do not give anyone your inputs or results to train their models on, and we do not train models on them ourselves.
• Sentry receives crash and failure reports.
• Cloudflare provides our domain and DNS.
• Meta, TikTok and Snapchat receive advertising events. The next section covers exactly what that means and how to switch it off.

We never sell your data. The advertising networks above are told that something happened (a page was opened, a tool was run) and which tool it was. They are never sent your inputs, your results, your photos, your email, or your name.

The necessary ones run either way. A cookie keeps you signed in. Another holds the anonymous visitor id behind run limits. Your browser also holds a visit id and the campaign tags from however you arrived, so a single visit reads as one visit. None of this follows you to other sites.

The advertising ones are yours to switch off. While we are running ads, pixels from Meta, TikTok and Snapchat load by default and we tell you so on your first visit. They are third-party, they set their own cookies, and they exist to recognise you elsewhere, which is why turning them off is one click in that notice and always available afterwards under Cookie choices at the bottom of any page. Turn them off and the scripts are removed and never loaded again, and nothing about Orchard works differently for you.

Orchard is hosted in the United States, and the services listed above are mostly US companies. If you use Orchard from outside the US, including the Philippines and the EU, your data is transferred to and processed in the United States, which may have different privacy laws than your own country. Using Orchard means you understand that.

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email [email protected] from your account email and we will get back to you within 30 days. To change your mind about advertising cookies, use Cookie choices at the bottom of any page. Switching them off later is one click, the same as it was the first time, and we ask again once a year regardless.

Run history sticks around so you can come back to it, which is the point of having it. Server logs expire on a 90-day clock.

Photos you upload are deleted within a day. They are held only long enough to run the tool and render any picture it produces, then our storage expires them automatically. That happens whether or not the run finished, so a photo you uploaded and then thought better of goes the same way. What the tool produced from it is a result, and follows the rule above.

If you want your account, a specific run, or an uploaded photo deleted, email [email protected] and we will handle it, including for runs you made before signing in. Self-serve deletion is coming.

Orchard is not for children under 13, and we do not knowingly collect their data. Photo tools are for adults only. The full age rules are in the Terms of Service.

If our practices change, this page and its effective date change with them. Questions or requests: [email protected]. Orchard is operated by Orchard, which is responsible for the data described here. The rules for using Orchard live in the Terms of Service.