Privacy Policy
Last updated: 2026
1. Who is the controller
Orchera is operated by Ahmed Ayman Ahmed Fouad Hamam (the "Seller"), who acts as the data controller for personal data processed through the service.
2. Personal data we collect
- Account data: name, email address, authentication identifiers (including data from Google sign-in if you use it), profile picture.
- Content data: conversations, custom characters, uploaded images and PDFs used as character knowledge sources.
- Usage data: features used, credit consumption, discussion modes, timestamps.
- Technical data: IP address, device and browser information, cookies and similar identifiers.
- Support data: messages you send to us.
Payment data (card details, billing address) is collected and processed directly by our Merchant of Record, Paddle. We do not store payment card data.
3. Why we use your data
- create and operate your account;
- provide AI character conversations and related features;
- process purchases and manage subscriptions (via Paddle);
- secure the service, prevent fraud and abuse;
- improve the product and develop new features;
- respond to support requests;
- send service-related communications and, with your consent, marketing.
4. Legal basis
We rely on (a) performance of a contract to provide the service you signed up for; (b) legitimate interests for security, fraud prevention, and product improvement; (c) consent for optional marketing and non-essential cookies; and (d) legal obligation where required by law.
5. Sharing your data
We share personal data with:
- Paddle.com Market Limited, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, invoicing, and refunds;
- Service providers and subprocessors who host our infrastructure, run analytics, send emails, and provide AI model inference (including Google for Gemini models);
- Professional advisers (legal, accounting) where strictly necessary;
- Authorities where required by law or to protect rights, property, or safety.
6. International transfers
Some of our service providers are located outside your country, including outside the UK and EEA. Where this is the case we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
7. Retention
We keep personal data only as long as needed for the purposes above, to comply with legal obligations, or to resolve disputes. Account data is kept while your account is active and deleted or anonymised on request or after a reasonable inactivity period.
8. Your rights
Subject to applicable law (including GDPR for UK/EEA users), you may have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, to withdraw consent, and to lodge a complaint with a supervisory authority. We aim to respond within one month.
9. Security
We use appropriate technical and organisational measures, including encryption in transit, access controls, and isolated authentication, to protect your data. No system is completely secure; please use a strong password and protect your account.
10. Cookies
We use essential cookies to keep you signed in and remember preferences. We may use limited analytics cookies to understand how the product is used. You can manage cookies through your browser settings.
11. Contact
For privacy questions or to exercise your rights, contact the Seller via the support channel inside the app.