How OrchHub collects, uses, and protects your information.
Last updated: February 13, 2026
OrchHub is operated by The Pixel Flow, LLC (“we,” “us,” or “our”). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you access or use the OrchHub platform at orchhub.app and related services (collectively, the “Service”).
Account Information. When you create an account, we collect your name, email address, and authentication credentials through our identity provider (Clerk). If you sign in via a third-party provider (Google, GitHub), we receive the profile information you authorize.
Organization Data. If you create or join an organization, we store organization names, member roles, and associated project data.
Usage Data. We automatically collect information about how you interact with the Service, including pages visited, features used, agent interactions, and pipeline execution logs.
Payment Information. Payment processing is handled by Stripe. We do not store credit card numbers or bank account details on our servers.
We use collected information to operate and improve the Service, process transactions, communicate with you about your account, provide customer support, enforce our terms, and comply with legal obligations. We may use aggregated, anonymized data for analytics and product development.
OrchHub uses artificial intelligence agents to execute tasks on your behalf. Content you provide to agents — including prompts, project briefs, and uploaded files — is processed by third-party AI model providers (via OpenRouter) to generate outputs. We do not use your content to train AI models. Agent outputs are stored in your account and are subject to the same protections as other account data.
The Service integrates with third-party platforms including but not limited to GitHub, Notion, Slack, Vercel, Stripe, and various AI model providers. When you connect a third-party service, you authorize us to access your data on that service as described during the authorization flow. Each third-party service's use of your data is governed by its own privacy policy.
We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. Integration credentials are encrypted using AES-256-GCM before storage. Despite our efforts, no method of electronic transmission or storage is completely secure.
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).
Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. You may also have the right to object to or restrict certain processing. To exercise these rights, contact us at [email protected].
We use essential cookies for authentication and session management. We use analytics tools (PostHog) to understand usage patterns. You can control cookie preferences through your browser settings.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a new “Last updated” date. Your continued use of the Service after changes constitutes acceptance.
For privacy-related inquiries, contact The Pixel Flow, LLC at [email protected].