Privacy. What we collect when you use Orrin, why, who else sees it, and how to have it deleted.

Orrin Labs, Inc. ("Orrin", "we") makes the Orrin coding agent and runs orrin.dev. We are the controller of the personal data described here. For anything in this policy, write to privacy@orrin.dev.

We collect only what we need to run the service and to bill for it:

• Account details: your name, work email, and the GitHub or GitLab account you sign in with.
• Billing details: your company's name and address. Card numbers go to our payment processor and never reach us.
• Usage: which runs you start and approve, and how the app is used, to keep it working and to improve it.
• Messages you send us, such as the contact form or a support email.

Orrin reads your code to fix it. Code is processed inside a run's sandbox and is deleted when the run ends. We keep the run's record (its steps, the diff it proposed and your approval) for as long as your plan's history setting says.

We do not train models on your code, your issues or your run records, and our model providers are contractually barred from doing so.

• To provide the service you signed up for, which is our legal basis for most of it.
• To keep it secure and to stop abuse, which is our legitimate interest.
• To send you product news, only if you ask for it. Every email has a link to stop.

We use a small number of subprocessors to host the service, process payments and send email. They are listed on our security page, with what each one does. We do not sell personal data.

Account details for as long as you have an account, and 30 days after you close it. Billing records for seven years, because tax law requires it. Run history for 90 days on Team, and for the period you choose on Enterprise.

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Write to privacy@orrin.dev and we will answer within 30 days. If you are in the UK or the EU you can also complain to your data protection authority.