1. Scope and who we are
This Privacy Policy explains how Aiverse Tech Pte.ltd. ("Orlino," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information when you use Orlino websites, applications, accounts, subscriptions, support channels, and related services (the "Service").
Orlino is provided by Aiverse Tech Pte.ltd., located at 112 Robinson Road #03-01 Robinson 112 Singapore (068902). This Policy applies to individuals using the Service, including on behalf of an organization. Additional notices may apply to a particular feature, region, or transaction.
2. Information we collect
We may collect the following categories of information:
- Account and profile information: such as your name, email address, account identifier, authentication status, subscription status, and settings.
- Inputs and Outputs: text, images, audio, video, files, prompts, instructions, and other material you submit, together with responses generated through the Service.
- Payment and transaction information: such as plan, billing period, purchase status, renewal status, and limited transaction records. Payment credentials are processed by payment providers such as Google, Apple, and Airwallex; we generally do not receive your full card number.
- Device and technical information: such as IP address, device and browser type, operating system, language, time zone, identifiers, network information, and diagnostic data.
- Usage and security information: such as pages and features used, model selections, timestamps, interactions, error reports, security events, and logs needed to operate and protect the Service. This may include records of your instructions and confirmations for agent actions where available.
- Cookie and similar-technology data: as described in our Cookie Policy, including your consent choice and, where permitted, analytics and advertising attribution data.
- Communications: information you include when contacting support, making a privacy request, or otherwise communicating with us.
If you sign in with Google, GitHub, or Apple, we receive information that you authorize the provider to share, such as an account identifier, name, email address, or profile image. The provider also processes information under its own privacy terms.
3. How we use information
We use personal information to:
- create, authenticate, secure, and manage accounts;
- provide requested AI features and transmit relevant Inputs to the model or infrastructure provider selected for the request;
- generate and deliver Outputs;
- process subscriptions, renewals, cancellations, and transaction records;
- maintain, troubleshoot, secure, and improve the Service;
- prevent abuse, fraud, unauthorized access, and violations of our policies;
- communicate about service, support, security, legal, and account matters;
- measure website and product performance and, where allowed, evaluate campaigns and advertising attribution; and
- comply with law, enforce agreements, and protect users, Orlino, and others.
We may process Inputs and Outputs to deliver the Service, investigate safety or reliability issues, troubleshoot failures, and improve product functionality. Orlino does not use Inputs or Outputs to train or fine-tune its own foundation models. Third-party AI providers may process submitted content under the arrangements and settings applicable to the Service and their own legal obligations.
4. AI Processing Services
Orlino uses third-party AI technologies to provide features such as AI content generation, question answering, agent reasoning, task execution, data analysis, and recommendations. When you use these features, the content of your Inputs may be sent to the AI provider or supporting infrastructure used for your request.
4.1 Information processed by feature
The following applies only to features available to you and that you use:
- Text (such as chat, AI-assisted search, and question answering): prompts, instructions, relevant conversation history, and task context.
- Files and documents: uploaded content, related prompts, and context.
- Images: text descriptions, reference images, or images to be processed.
- Voice and audio: voice or other audio content, related text, and context.
- Video (where offered): text descriptions and submitted images, video, or audio.
- Agents and tasks: prompts, uploads, results from connectors you authorize, relevant conversations, task context and results, and limited technical data needed for the task.
4.2 AI providers and infrastructure
Orlino may provide access to model families including GPT, Claude, DeepSeek, Kimi, Qwen, and others available in the Service. Depending on the model and how a request is routed, AI providers may include OpenAI, Anthropic, Moonshot AI, and other providers performing the types of processing described here. The provider may vary by model, feature, plan, region, routing arrangement, and availability.
Some AI services may be hosted or supported on cloud platforms such as Amazon Web Services. These infrastructure providers may process information reasonably necessary to host, store, transmit, secure, monitor, and operate the applicable service. Orlino is independent of third-party model providers; naming a model family or provider does not imply affiliation, endorsement, or partnership.
Before processing a request, the Service may display the applicable model, provider, or provider category.
4.3 How Inputs are used and your choices
We send only the content needed for the feature you request. We do not proactively send unrelated personal information to an AI provider. The provider may process the information it receives to:
- generate and deliver the requested response or result;
- provide the selected AI, agent, task, analysis, recommendation, image, audio, or video feature;
- perform safety, abuse, fraud, and security checks;
- maintain, troubleshoot, and monitor service reliability; and
- comply with law and enforce applicable service restrictions.
Third-party AI providers process the information they receive under our agreements, their privacy notices, and applicable law. Before submitting personal information, confidential business information, or other sensitive content, make sure you have the right to share it. To learn about a relevant provider's privacy notice, email support@orlino.ai.
Orlino does not use your Inputs or Outputs to train or fine-tune its own foundation models. Third-party providers may process submitted content under the arrangements and settings applicable to the Service, as explained above. Providers may still process limited content as needed to prevent abuse, maintain security, fix problems, keep the Service reliable, or improve its operation.
If we later make a significant change to the information sent, the purpose of processing, or the categories of AI providers used, we will update this Policy and give you additional notice where the law requires it.
5. Legal bases for processing
Where applicable law requires a legal basis, we rely on one or more of the following:
- Contract: to create and manage your account, provide requested features, and administer subscriptions.
- Legitimate interests: to secure, maintain, understand, and improve the Service, prevent fraud, and communicate about the Service, where those interests are not overridden by your rights.
- Consent: for optional analytics or advertising technologies and other processing where consent is required. You may withdraw consent at any time.
- Legal obligations and rights: to comply with law, respond to lawful requests, establish or defend claims, and protect safety and legal rights.
6. How we share information
We may disclose information to:
- AI model and infrastructure providers that process requests and return Outputs;
- cloud hosting, storage, security, diagnostics, communications, and customer-support vendors;
- authentication providers, including Google, GitHub, and Apple, when you choose their sign-in service;
- payment and app-distribution providers, including Google, Apple, and Airwallex, for purchases, billing, fraud prevention, and transaction support;
- analytics and advertising providers, only as allowed by your choices and applicable law;
- professional advisers, auditors, insurers, and transaction counterparties subject to appropriate confidentiality obligations; and
- government authorities or other parties when required by law or reasonably necessary to protect rights, security, and safety.
We may also share aggregated or de-identified information that cannot reasonably identify you. We do not sell personal information for money. Where applicable law treats targeted advertising or certain disclosures as a "sale" or "sharing," you may opt out as described below and in our Cookie Policy.
7. Third-party services
To provide sign-in, AI features, payments, and the infrastructure for the Service, we use third-party platforms and providers where needed. The provider and information involved depend on the feature you choose and the way the Service is delivered. The table describes categories that may be processed; it does not mean that every provider receives every category or that every listed feature is available to every user.
| Platform or provider | Purpose | Information that may be processed | Additional information |
|---|---|---|---|
| Google Sign-In | Optional third-party sign-in and account linking | Google account identifier, email address, name, profile image, authentication status, and other information you authorize Google to share | You can manage the authorization in your Google Account settings. |
| GitHub Sign-In | Optional third-party sign-in and, where offered, developer identity features | GitHub account identifier, username, email address and profile image, if provided, and other information you authorize GitHub to share | Repository or organization information is processed only where a relevant feature is offered and you grant the required access. |
| Sign in with Apple | Optional third-party sign-in and account linking | Apple account identifier, email address or private relay address, name if shared, and authentication status | You can manage the authorization in your Apple Account settings. |
| Third-party AI model providers | AI content generation, questions and answers, agent reasoning, task execution, analysis, and recommendations, where available | Inputs and prompts, uploaded content, relevant context, Outputs or task results, information derived from them, and necessary technical information | We send the information needed to provide the requested feature to the model or supporting infrastructure used for that request. |
| Google Play billing | In-app purchases, subscriptions, and order handling through Google Play, where offered | Order information, transaction and subscription status, and a limited payment-method identifier | Google generally handles the underlying payment account or full card credentials directly. |
| Apple App Store billing | In-app purchases, subscriptions, and order handling through the App Store, where offered | Order information, transaction and subscription status, and a limited payment-method identifier | Apple generally handles the underlying payment account or full card credentials directly. |
| Airwallex | Payment processing, collection, settlement, fraud prevention, and accounting for supported purchases | Order and billing information, transaction amount and status, a limited payment-method identifier, and necessary risk information | Depending on the service and applicable law, Airwallex may process some payment information as an independent controller or a processor under its own privacy notice and relevant agreements. |
| Google Firebase Cloud Messaging | Push notifications in the Android app, such as task and approval alerts | FCM registration token, app version, device model, operating system version, and notification delivery status | You can turn off Orlino notifications in your Android settings. |
| Firebase Analytics | App install, usage, and conversion measurement, including Google Ads campaigns | App instance ID, Advertising ID where permitted, device and app information, in-app events, and a pseudonymous analytics ID | We do not send your Inputs or Outputs to Firebase Analytics. |
| Android Credential Manager | Showing the Google account chooser for optional sign-in on Android | Google account identifier, email address, name, profile image, and a one-time sign-in token | Credential Manager is part of Android; Orlino does not receive your Google password. |
| AppsFlyer | Mobile advertising attribution, campaign measurement, and deep links into the app | Advertising ID where permitted, install referrer, AppsFlyer ID, IP address, device information, in-app events, and a pseudonymous analytics ID | We do not send your Android ID, IMEI, Inputs, or Outputs to AppsFlyer. |
| Google Advertising ID and Android Ad Services | Advertising measurement and attribution through Firebase Analytics and AppsFlyer | Resettable Google Advertising ID, its opt-out status, and attribution data from Android Ad Services on supported devices | The app shows no third-party ads. You can reset or delete the ID in Android settings. |
| Google Play Services | System services for push delivery, Google sign-in, the Advertising ID, and install referrer | Device and app identifiers, technical and diagnostic information, and Google account information if you use Google sign-in | Provided by Google under its own terms. Some Android features may not work without it. |
| AWS and other cloud providers | Computing, storage, networking, logging, backups, security, and disaster recovery | Account and Service data, uploaded files, task data, logs, and device and network information | These services support the operation, storage, and security of the Service. |
Third-party sign-in is used only when you choose the relevant sign-in or account-linking option. Signing in with GitHub does not, by itself, authorize access to your repositories or organizations; any such access is limited to the permissions you grant for an offered feature. Apple may provide a private relay address instead of your personal email address.
When you use an AI feature, the model provider or supporting infrastructure may process the content and context needed for that request. Different features or selected models may use different providers. The payment provider involved depends on the purchase channel you choose. We generally receive limited transaction details rather than your full payment-card number.
We provide each provider with information reasonably needed for its role and require appropriate protection under our agreements where it processes information on our behalf. Some sign-in and payment platforms may also process information for their own purposes under their privacy notices and applicable law. You can avoid an optional sign-in or purchase channel by not using it, subject to available alternatives. Model and cloud processing may be necessary to provide the AI feature or the Service; if you do not want that processing, do not use the affected feature. If you need more information about a provider relevant to your use, email support@orlino.ai.
8. Retention and deletion
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security, complying with legal obligations, resolving disputes, and enforcing agreements. Where an agent action requires confirmation, we may retain the instruction and confirmation record for security and dispute resolution for as long as reasonably necessary.
Sandbox or temporary workspace data may be retained for up to 7 days for free users and up to 21 days for paid users, unless a feature or notice states otherwise. Other records may have different retention periods based on their purpose and legal requirements.
When you delete your account, we generally delete or de-identify associated personal information within 30 days. Some information may remain longer in backups, security records, transaction records, or legal files where necessary for fraud prevention, legal compliance, dispute resolution, or the establishment or defense of claims. We may retain de-identified information that no longer identifies you.
9. Your rights and choices
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of targeted advertising or legally defined sale or sharing; and appeal a decision concerning a privacy request.
You may manage optional cookies through the Cookie settings link in the website footer. U.S. visitors may use the “Do Not Sell or Share My Personal Information” link in the footer to opt out of advertising and attribution sharing. Where required, we honor recognized browser-based opt-out signals such as Global Privacy Control for the browser or device sending the signal.
To exercise a privacy right, email support@orlino.ai. We may need to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law. You may also complain to your local data-protection authority.
10. Cookies and similar technologies
We use cookies, local storage, pixels, and similar technologies to operate authentication and security, remember choices, measure performance, and, with consent where required, understand campaigns and advertising attribution. Our Cookie Policy describes the categories, controls, and regional choices in more detail.
11. Security
We use administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for protecting your credentials and promptly notifying us of suspected unauthorized use.
12. International transfers
Orlino and its service providers may process information in Singapore, the United States, and other countries where they operate. These countries may have data-protection laws different from those where you live. Where required, we use recognized safeguards for international transfers, such as contractual protections, adequacy decisions, or other lawful transfer mechanisms.
13. Children
The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
14. Regional notices
Users in the European Economic Area, United Kingdom, and Switzerland may have the rights described in Section 9 and may contact their local supervisory authority. Non-essential cookies are not activated before consent where required, and consent can be withdrawn through the Cookie settings link in the website footer.
Residents of applicable U.S. states may have rights to know, access, correct, delete, or obtain a copy of certain personal information and to opt out of targeted advertising or legally defined sale or sharing. We do not discriminate against users for exercising applicable privacy rights. We recognize Global Privacy Control where legally required.
15. Changes to this Policy
We may update this Policy to reflect changes to the Service, law, or our practices. We will publish the updated version and provide additional notice or obtain consent when required by law. When published, the version date at the top will show when this Policy was last revised.
16. Contact us
For privacy questions or requests, contact support@orlino.ai, or write to:
Aiverse Tech Pte.ltd.
112 Robinson Road #03-01 Robinson 112 Singapore (068902)