Privacy

Orchestra is operated by Orchestra Productions Inc., a Delaware corporation. You can reach us at privacy@orchestra.build.

This page explains how we handle information from the public orchestra.build pages, requests for early access and company enquiries. Joining the interest list does not create a product account or grant product access.

What we collect

When you request early access on the home page, we collect:

• Your email address, because you gave it to us.
• The Orchestra name you request, and the result of confirming it through the link we email you. A requested name is not held until confirmation succeeds. We record which name is held for your address so it can become your username when you later create an account with that address.
• The date and time you submitted it.
• Your IP address, kept only so we can stop bots and abuse of the form. It isn’t used to identify you or to build a picture of you.
• Whether you ticked the box asking for project updates. Project updates are optional, and the box is unchecked unless you choose it. Leaving this box unchecked does not affect your request for early access.

If you choose the company form instead — on the home page, or at /business — we also collect your first and last name, the company name, and, if you give them, a phone number and what kind of number it is. We also record how you said you want to be reached — email, phone call, text message, or any combination — so we use the one you picked.

If you share your company size, we keep that range with your inquiry.

We also keep records needed to verify your address, manage your request and prevent abuse: a comparison form of your email address, verification-link hashes and their expiry and outcome, send counts, request status and bot-check results. Our hosting and email services produce technical logs for operation and troubleshooting. Earlier company enquiries may contain the details requested by the form at that time.

We use Vercel Web Analytics and Speed Insights on the public home, business, Privacy and Terms pages to understand visits and improve page performance. These services receive the page path, visit time, referring website domain when available, approximate location, browser and device information, and loading and interaction measurements. Performance reports can include technical identifiers for page elements, not the text you enter.

We exclude sign-in, account and confirmation pages from this measurement. We remove query parameters and fragments from measured page URLs and do not send form values, names, email addresses, phone numbers or confirmation tokens to these analytics services. Requests for early access and their confirmations are recorded separately in our database.

Web Analytics estimates visitors using a temporary value derived from the incoming request. Vercel discards that visitor-session value after 24 hours; aggregate statistics can remain available for longer. We do not enable analytics cookies, identity tracking or session replay. We skip measurement when your browser sends Do Not Track or Global Privacy Control.

What we don’t do

• No advertising trackers. We do not use advertising pixels or follow you across other websites for advertising.
• No selling. We do not sell, rent, or trade your information. Not to anyone, at any price.
• No sharing for marketing. Your address is not passed to advertisers, data brokers, or partners.
• No profiling. We are not building a picture of you from this.

What this site puts on your device

When we send a sign-in link, we save a small cookie for up to an hour in the browser that asked for it. It holds a one-way code made from the email address you typed, so the link can open by itself only in that browser, and it is deleted when that link signs you in there. Invitation links also carry the email address they are for, so the page can show which account it opens.

After successful confirmation, we may keep your chosen Orchestra name or first name in this tab’s session storage to show a small personal greeting. It is used only for that display and is ignored after 12 hours. It does not sign you in or grant product access.

Where browser storage is available, we save a small flag after the opening wordmark and message appear so the opening does not repeat on later visits. The flag stays on your device until you clear this site's data. It is not sent to us or used for advertising.

The current site code does not save public pages or static files for optional offline use. When you return online, it attempts to remove the old service worker and its offline caches. Older copies may remain on a device until the update and cleanup succeed. Submitting a form still needs a connection.

After an accepted early-access request, we also save a timestamp on your device. Completing confirmation in the same browser clears that timestamp; otherwise it can remain until the site's data is cleared. If you choose a light or dark appearance, a cookie remembers that choice for up to a year. Signing in uses session cookies.

You can remove these items by clearing this site's data in your browser settings. That can also sign you out and reset your preferences.

Why we collect it

To verify your address, manage your request for early access, hold a name when confirmation succeeds, and respond to company enquiries through your chosen contact method. We send occasional project updates only if you opt in.

We will not use it to send you unrelated marketing, and we won’t sell it. Every note after the first one carries a way out in the message: reply with “remove”, or write to us, and you are off the list.

Who else touches it

We use a small number of service providers to run the site and send email. They process your information on our instructions and are not permitted to use it for their own purposes:

These providers are based in the United States and may process and store data outside your country. We rely on the data-transfer safeguards each of them publishes; ask us and we’ll tell you which apply.

How long we keep it

Until Orchestra opens to you, or until you ask us to delete it, whichever comes first. In any case, no longer than 24 months from when you signed up, unless you’ve asked us to keep you on the list.

If we abandon the project, we delete the list. We will not quietly hold it forever.

Getting it removed

Email privacy@orchestra.build and ask. You do not need to explain why, and you do not need to justify it. We’ll delete your address and release the name we were holding for you, so it goes back into the pool for someone else. We’ll confirm when it’s done, and we’ll do it within 30 days.

You can also ask us what we hold about you and we'll tell you, including the information and records described above.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, to object to its processing, or to receive a copy of it. Contact privacy@orchestra.build and we will honor any right that applies to you.

If you’re in the EEA or the UK, our basis for processing is your consent. You asked to be told when Orchestra is ready. You can withdraw it at any time by asking us to delete your information. You also have the right to complain to your local data protection authority, or to the Information Commissioner’s Office if you’re in the UK.

If the company changes hands

If Orchestra is transferred to or acquired by another company, your information may move with it, and whoever holds it will be bound by the commitments on this page. If that happens we’ll tell you.

Security

The list is stored in a database with access restricted to our own service, and it’s sent over an encrypted connection. No system is perfectly secure and we’re not going to claim otherwise. If we ever discover a breach affecting your information, we’ll tell you.

Changes

If this page changes in a way that affects you, we’ll update the date at the top. If the change is significant and we hold your address, we’ll email you about it rather than change it quietly.

Contact

privacy@orchestra.build · Orchestra Productions Inc.