Orchard Files

Privacy

Last updated 12 March 2026.

What we hold

Two separate things, kept apart:

What we log

Connection logs record the source address, the timestamp, the workspace, and the operation. They exist for abuse handling and for answering "what happened to this file", and they are deleted after 30 days. We do not log object contents and we do not log the plaintext of any credential.

What we do not do

Processors we use

Payment processing and invoice delivery are handled by a third party that receives your billing name, address and card details; we never hold card numbers. Outbound email is sent through a delivery provider that sees the recipient address and the message. Everything else — storage, transfer, authentication — runs on hardware we operate.

Retention

Object contents and versionsYour retention window; purged within 7 days of expiry
Connection logs30 days
Audit trail13 months
InvoicesAs long as tax law requires
Closed accountsData destroyed 30 days after closure, invoices excepted

Your requests

Ask us for a copy of what we hold about you, a correction, or deletion, and we will do it within 30 days. Most of it you can do yourself: export with the CLI, close the workspace in the console. Write to privacy@orchardfiles.com.

Changes

If this page changes in a way that affects what we collect or how long we keep it, we email every workspace owner at least 30 days beforehand. Wording fixes we just make.