Privacy Policy

Last updated: May 2026

1. Introduction

Orphean ("Orphean," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at orphean.io, communicate with us, or use the Orphean platform and related services (collectively, the "Services"). By using the Services, you agree to the practices described in this policy.

2. Information We Collect

We collect information in the following ways:

• Information you provide. Contact details (such as your name, work email, company, and phone number), the contents of inquiries or support requests, and account information when you register for the Services.
• Information collected automatically. Device and usage data such as IP address, browser type, pages viewed, referring URLs, and timestamps, collected through cookies and similar technologies.
• Customer data. Security event, entity, and operational data that customers ingest into the platform, which is processed on the customer's behalf under our agreements with them.

3. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Services;
• Respond to inquiries, demo requests, and support tickets;
• Send administrative information and, where permitted, relevant product communications;
• Monitor usage, detect and prevent fraud or abuse, and ensure the security of the Services; and
• Comply with legal obligations and enforce our agreements.

4. Legal Bases for Processing

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies, we process personal data on the basis of your consent, the performance of a contract, our legitimate interests in operating and securing the Services, and compliance with legal obligations.

5. How We Share Information

We do not sell your personal information. We may share information with service providers who process data on our behalf (such as hosting, analytics, and communications providers) under appropriate confidentiality and data-protection obligations; with professional advisors; in connection with a corporate transaction; and where required to comply with law or protect rights, safety, and security.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Customer data is retained in accordance with the applicable customer agreement and configured retention settings.

7. Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. For more detail, see our Security page. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Transfers

We may process and store information in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards such as standard contractual clauses to protect that information.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with a supervisory authority.

10. Cookies

We use cookies and similar technologies to operate the website, remember preferences, and understand how the site is used. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

11. Children's Privacy

The Services are intended for business use and are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes will be communicated where required by law.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us or email privacy@orphean.io.