Privacy Policy

Orvoq enables collaboration between people, AI models, and AI agents. Session content is processed only to provide requested functionality, maintain collaboration history, and enable authorized participants to collaborate.

When AI capabilities are used, prompts and selected context may be securely transmitted to AI providers selected by the customer.

We do not use customer content to train our own foundation models unless the customer explicitly opts in. Data obtained through a connected Google API (such as Google Drive) is never used to train or improve any generalized or foundation AI/ML model, regardless of this setting.

AI agents access only the permissions, tools, and knowledge explicitly granted to them. Agent activity may be logged for transparency, monitoring, auditing, and troubleshooting.

Approvals, edits, comments, overrides, and intervention events may be recorded as part of workspace history.

Workspace administrators control retention and access to collaboration history where supported.

Customers may connect third-party services including identity providers, source repositories, storage platforms, calendars, messaging tools, and productivity applications.

Orvoq integrates with two Google Workspace APIs, each used solely to power the specific feature you connect it for:

• Google Drive — access is limited to the single folder you select through Google's file picker. Orvoq never sees or accesses any other files or folders in your Drive. Files in that folder are read to index their content into your workspace's Knowledge Base, making it searchable by you and your authorized teammates and AI agents.
• Google Calendar — access is limited to the calendars you explicitly connect, used only to display and manage the events you choose to sync. Calendar data is never sent to any AI or machine-learning provider.

We do not use this access for advertising, marketing, analytics, or any purpose unrelated to the feature you enabled, and we do not sell it. We do not retain or use data obtained through Google Workspace APIs to develop, improve, or train any generalized or foundation AI and/or ML model — including data that passes through a sub-processor (such as an embeddings provider) solely to generate search results for the Knowledge Base feature.

Some workspaces may connect a self-hosted or custom AI model endpoint (for example, a self-deployed open-source model) instead of one of our built-in providers. In that configuration, the model runs on infrastructure the customer controls, not infrastructure Orvoq or a third-party AI vendor operates. Google user data processed through that connection is sent only to the customer's own endpoint for the purpose of answering that customer's own request, is processed there, and is never shared with or used by a third-party AI provider to train or improve a model.

You can disconnect Google Drive or Google Calendar at any time from your workspace settings, which immediately stops all further access.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Customers retain ownership of prompts, files, documents, knowledge, session content, and AI-generated artifacts.

We do not sell personal information.

We may share information with:

• AI providers selected by you
• Cloud infrastructure providers
• Identity providers
• Payment processors
• Service providers
• Authorities when legally required

We use safeguards including:

• Encryption in transit
• Encryption at rest
• RBAC
• Audit logging
• Authentication controls
• Workspace isolation where supported

Depending on your subscription, Orvoq may support:

• SSO
• MFA
• Audit trails
• Data residency
• API authentication
• Administrative controls

We collect operational telemetry such as API usage, performance metrics, token consumption, runtime diagnostics, and error logs to operate and improve the Service.

Information may be processed in countries where our infrastructure or providers operate.

Subject to applicable law, you may request access, correction, deletion, export, or restriction of your personal information.

We may update this Privacy Policy from time to time.