Privacy policy

DRAFTThis text is a draft under legal review and is not the final version yet.

Last updated: draft of 27 October 2026

Data controller

[COMPANY NAME — to be completed], VAT no. [to be completed], registered office at [ADDRESS — to be completed], email [EMAIL — to be completed].

What data we process

Browsing data on the public site: IP address and technical data in server logs, kept as long as needed for the security of the service [retention — to be completed].

Account data (once sign-ups open): email, hashed password, sessions.

Content you upload or generate: text, images, videos, characters.

Payment data: handled by Stripe; Orchestriq never sees or stores card details.

Why we process it

To provide the service you ask for (performance of a contract), for security and abuse prevention (legitimate interest) and to meet legal obligations such as tax rules.

Who we share it with

Providers that help us run the service, appointed as data processors: hosting [PROVIDER — to be completed], text generation (Anthropic), image and video generation (RunPod and the other configured providers), payments (Stripe), transactional email (Resend). Some may process data outside the European Union, with the safeguards required by the GDPR [details — to be completed].

Your rights

You can request access, rectification, erasure, restriction and portability, and object to processing, by writing to [EMAIL — to be completed]. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).