Privacy Policy

At Orange AI ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Customer Service RAG Platform (the "Service").

1. Information We Collect

We collect information that you provide directly to us, including:

• Account Information: Name, email address, and organization details when you register.
• User Content: Documents, text, and data you upload to your Knowledge Base.
• Communication Data: Chat logs and messages processed through our Service (e.g., via LINE or Web Widget).
• Google Workspace Data: If you choose to integrate Google Calendar, Google Docs, or Google Sheets, we access only the specific files you actively select and process information from these APIs to provide AI assistance based on your instructions.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process and respond to customer service inquiries via AI agents.
• Access, read, and append to the specific Google Docs, Google Sheets, and Google Calendar events you have selected, solely based on your explicit commands given to the AI agents. For Google Docs and Sheets, we can only access the specific files you choose through Google's official file picker, or that our Service creates for you; we do not browse or access any other files in your Drive.
• Authenticate users and secure our platform.
• Communicate with you about updates, security alerts, and support messages.

3. Data Storage and Security

Your data is stored securely on enterprise-grade Google Cloud Platform (GCP) infrastructure.

• Database: Distributed enterprise cloud database (Authentication, Chat Logs, Metadata, OAuth Tokens).
• Files: Encrypted object storage (Uploaded Documents and Attachments).
• Vectors: Dedicated vector database (Semantic Embeddings).

We implement industry-standard security measures to protect your personal information. OAuth refresh tokens are securely stored, and we do not access your Google accounts outside the scope of executing your direct AI agent requests. However, no method of transmission over the Internet or electronic storage is 100% secure.

4. Google API Services Usage (Limited Use Policy)

Orange AI's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Sharing, Transfer, and Disclosure of Google User Data

We are committed to protecting your Google user data. We do not share, transfer, or disclose any user data received from Google APIs to any unrelated third parties, especially for advertising, marketing, sale, or any purpose other than providing the essential features of the Service. We only transfer specific data to trusted AI model service providers (such as Google Vertex AI, to process instructions and generate AI responses for you) to the extent necessary to provide the core functionality of our Service, and these providers have committed not to use your data to train their public models. All data transfers strictly adhere to Google's Limited Use requirements.

Retention and Deletion of Google User Data

We only retain Google user data while you actively use our Service:

• Revoking Authorization: You can disconnect your Google account integration at any time through the Orange AI console. Once disconnected, we will immediately and completely remove the associated OAuth tokens (Access & Refresh Tokens) and cached data from our servers and database.
• Account Deletion: If you choose to delete your Orange AI account, all your personal account information, chat logs, knowledge documents, and all associated Google user data will be permanently and completely deleted from our database within 30 days, in accordance with the procedures outlined in our Account Deletion Page. No backup copies will be retained.

5. Third-Party Services

We may share data with trusted third-party service providers solely to provide the Service:

• Google Gemini (via Vertex AI/Genkit): For generating AI responses.
• Messaging Platforms (LINE, Facebook): To send and receive messages as configured by you.

6. Your Data Rights

You have the right to access, correct, or delete your personal information stored in our Service. You can manage your organization's data directly through the Orange AI dashboard or contact us for assistance.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at service@orangeai.tw.