Privacy notice

Draft policy notice - legal and privacy review required before publication or reliance.

This page describes repository-level processing categories. Actual processing depends on the deployed configuration, enabled providers and connectors, customer instructions, and the applicable signed data-processing terms.

Potential data categories

• Account and organization details supplied by authorized users.
• Workflow inputs, outputs, metadata, and approval records.
• Connector content selected by the customer and permitted by its grants.
• Operational, security, billing, and support records created by configured services.

Purpose and disclosure

Data may be processed to provide configured workflows, administer accounts, investigate support or security events, meet legal obligations, and operate enabled providers. A current subprocessor list and provider terms must be verified for the target deployment; names appearing in source code are not evidence that a provider is active.

Retention, location, and security

Retention periods, deletion behavior, backup handling, data location, cross-border transfers, and security measures depend on verified deployment settings, provider records, applicable law, and the signed agreement. This repository notice sets no fixed period, region, response target, or certification status.

Requests

Requests concerning access, correction, export, deletion, objection, or restriction are handled under applicable law and the controlling customer agreement. Identity and authority may need to be verified before a request is acted on.

Contact

Send privacy questions without credentials or unnecessary personal data to sanjeev@orchestrum.in.