What we hold
Two separate things, kept apart:
- Your files and their metadata — the object contents, names, sizes, version timestamps and the workspace they belong to. This exists because it is the service.
- Account records — the email addresses of workspace members, the billing contact, invoices, and the API keys you have issued.
What we log
Connection logs record the source address, the timestamp, the workspace, and the operation. They exist for abuse handling and for answering "what happened to this file", and they are deleted after 30 days. We do not log object contents and we do not log the plaintext of any credential.
What we do not do
- No advertising, no advertising identifiers, no third-party trackers. This site loads no external scripts, fonts or images — you can check that in your browser's network panel.
- No selling, renting or licensing of any data, in any form, aggregated or not.
- No scanning of file contents for any purpose other than a specific, logged support request that a workspace owner made in writing.
Processors we use
Payment processing and invoice delivery are handled by a third party that receives your billing name, address and card details; we never hold card numbers. Outbound email is sent through a delivery provider that sees the recipient address and the message. Everything else — storage, transfer, authentication — runs on hardware we operate.
Retention
| Object contents and versions | Your retention window; purged within 7 days of expiry |
|---|---|
| Connection logs | 30 days |
| Audit trail | 13 months |
| Invoices | As long as tax law requires |
| Closed accounts | Data destroyed 30 days after closure, invoices excepted |
Your requests
Ask us for a copy of what we hold about you, a correction, or deletion, and we will do it within 30 days. Most of it you can do yourself: export with the CLI, close the workspace in the console. Write to privacy@orchardfiles.com.
Changes
If this page changes in a way that affects what we collect or how long we keep it, we email every workspace owner at least 30 days beforehand. Wording fixes we just make.