Last updated 2026-11-01
This policy explains what 1614754 B.C. Ltd. ("we") collects when you use Ortus Station, why, who it's shared with, and your choices. We don't sell your data and we don't show ads.
Your account: your email address and a securely hashed password, and the stations you belong to and your role in them.
What you put in and what your crew makes: chat messages, jobs and missions, files you attach or add to Knowledge, notes and preferences your bots remember, and the projects they make.
Connected apps: when you connect an app, the sign-in token it gives us (stored encrypted) and whatever your bots read or write there to do the jobs you give them.
Usage and billing: what work was done and what it cost, your balance, plan and payments. Payments are handled by Paddle; we see the card brand and last four digits, never the full card number.
Technical records: server logs (such as IP address and times of requests) kept to run and secure the service, and reports of errors in the app (what went wrong, and where) so we can fix them.
When you sign up: a check that you're a person, run by Cloudflare, which looks at your browser and connection for that moment.
To run the service for you: to do the work you ask for, show it to you and the people you share your station with, charge for it, keep it secure, and fix problems. We use your content only to serve you, not to train AI models.
To contact you about your account: sign-in, invitations, receipts, and important changes to the service.
Only the providers we need to run Ortus Station, each only for its part: Anthropic and OpenAI (the AI models that do the work, and image making), Google (making images and video), fal.ai (making video), Brave (web searches your bots run), Railway (hosting and our database), Paddle (payments, tax and receipts), Resend (sending our emails, such as sign-in links and invitations), Sentry (error reports) and Cloudflare (the check at sign-up that you're a person, and storing videos). The AI providers process your content under their business terms, which, as of this writing, don't allow them to train their models on it.
Most of these providers are in the United States, so your information is stored and processed there as well as where you are, and may be accessible to the authorities there under their laws.
Apps you connect (such as Google, GitHub or Slack) receive what your bots send them on your behalf.
We may disclose information if the law requires it, or to protect the service and its users. If the business is sold, this policy continues to apply to your data.
When you connect Google in Configuration, Apps, you connect each part on its own (Docs, Sheets, Drive, Calendar, Gmail), and Ortus Station asks Google only for what that part needs. Each also shares your Google account's email address with us, so you can see which account is connected.
Google Docs: we create a document in your Drive and write into it when you ask your crew for one, and read or add to a document you link or name.
Google Sheets: we create a spreadsheet and fill it in when you ask, and read or write the cells of a spreadsheet you link.
Google Drive: we save what your crew makes into an "Ortus Station" folder in your Drive, and open the files and folders you choose with Google's file picker. We can't see the rest of your Drive. (Some connections made during our beta can also read any file in your Drive, so that a file you link opens; that is only used to open the files you point us to, and ends when you disconnect.)
Google Calendar: we list your upcoming events when you ask, and create or move an event only after you approve it.
Gmail, where available: we read recent emails when you ask your crew to summarise them or find something, and save replies as drafts in Gmail. An email is only sent after you approve it.
We use Google user data only to do what you ask of Ortus Station and to show you the results. We don't sell it, we don't use it for advertising, and we don't use it to develop, improve or train generalised or non-personalised AI or machine-learning models, ours or anyone else's.
To do a job, what it needs (for example the text of a document you asked to summarise) is sent to the AI provider doing that work, Anthropic or OpenAI, which processes it for us under business terms that, as of this writing, don't allow it to train its models on it. People at Ortus Station don't read your Google data unless you ask us to (for example for support), or it's needed for security or to comply with the law.
Your Google sign-in tokens are stored encrypted. What your crew reads from Google can appear in the chats, projects and working folders you keep in Ortus Station (a working folder from Google Drive keeps the words of its files so your crew can search them), and is deleted when you delete those, or your account.
To disconnect, open Configuration, Apps and press Disconnect on the Google app: that deletes the tokens we stored, and Ortus Station can no longer reach your Google account. You can also remove Ortus Station's access at any time in your Google Account, at https://myaccount.google.com/permissions.
Ortus Station's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Questions about your Google data: support@ortus-station.com.
We use one cookie, to keep you signed in. Your browser also keeps a few preferences (such as light or dark mode and music) on your own device. There are no advertising or analytics trackers.
As long as your station is open. When you delete your station in Configuration, Settings, it closes at once and everything in it is deleted for good 7 days later, unless you restore it before then. When you ask us by email to delete your account, we delete your data within 30 days. Either way, we keep the billing records the law requires.
So that one email gets the free starter credit only once, when a station is deleted we keep a one-way, salted code made from its owner's email address, with the date. It can't be turned back into the address, and we never keep the address itself.
To let you change or extend a video, Google keeps that video and its description for up to 55 days.
You can see and delete most of your content in the app: chats, projects, files, notes and what your bots remember. You can disconnect apps at any time. A station's owner can download a copy of its data, and delete the station and their account, in Configuration, Settings; a team member can leave a station and delete their account there too. When someone leaves a station or is removed from it, their private chats there (with the crew and with Ortus Command) are deleted; what they shared stays with the station, shown as a former member's. To correct your data, or for anything else, email support@ortus-station.com. Depending on where you live you may have further rights, and the right to complain to your data protection authority.
Connections are encrypted, passwords are hashed, app tokens are stored encrypted, and each station's data is kept separate from every other's. No system is perfectly secure; if something happens that affects your data, we will tell you.
Ortus Station is not for anyone under 16, and we don't knowingly collect their information.
We will show the date of the latest version here and tell station owners about significant changes. Questions or requests: support@ortus-station.com. 1614754 B.C. Ltd., British Columbia, Canada.