Privacy Policy

Last updated: 22 July 2026

Orcha Chat ("Orcha", "we") is a secure AI chat platform built so that private conversations stay private. This policy explains what we process, what we never do, and the control you keep over your data.

The four promises we build on:

Your conversations are protected by encryption so strong that even we cannot open or read them.
We never use or collect your personal data for our own purposes.
We never train AI models on your personal data — only publicly available data is used for training.
We never share your personal data with any organisation, under any circumstances.

1. What we process

To provide the service we process: your account email and name (for sign-in), your messages and uploaded documents (encrypted at rest with 256-bit AES encryption under keys held in a hardware-protected key vault), your language and appearance preferences, plan and payment status, and anonymised usage counters (message and document counts for daily limits).

2. Personal data is tokenised before AI sees it

Names, phone numbers, ID numbers, addresses and similar identifiers are replaced with placeholders (like <NAME_1>) on your device or at our secure edge before any AI model reads your text. The real values are restored only on your screen. AI model providers never receive your raw identifiers.

3. Ghost mode — zero retention

In Ghost mode nothing is stored: no messages, no titles, no memory. The conversation exists only on your screen and is destroyed when you close it.

4. Documents

Uploaded documents are stored encrypted in a private bucket and auto-delete after 7 days (Free) or 90 days (Pro). Digital PDFs are read inside your browser where possible, so the raw file never leaves your device.

5. Your control — one click

You can delete any conversation, all conversations, or your entire account (history, memories, uploads and account record together) in one click from Settings. Deletion is immediate and permanent.

6. Payments

Pro subscriptions are processed by Razorpay. We never see or store your card, UPI or banking details — Razorpay sends us only a signed confirmation that payment succeeded.

7. Analytics

Our public website uses Google Analytics to understand aggregate traffic (pages visited, approximate region). Analytics never sees your conversations, documents or account contents.

8. Guest sessions

The free guest trial is rate-limited by a hashed network identifier that expires within 24 hours. Guest messages are never stored.

9. Contact

Questions or data requests: support@orchachat.com.