1. Who we are
Orgainse Pvt. Ltd. (“Orgainse”, “we”, “us”) operates the ORQYNE platform and orgainse.com marketing site. We act as the Data Controller for personal data collected through our marketing properties, and as a Data Processor for customer workspace data processed on behalf of our enterprise customers.
2. Data we collect
- Account data — name, work email, role, organisation, time zone
- Workspace content — projects, tasks, documents, files you upload
- Usage telemetry — page views, feature interactions, error logs (anonymised where possible)
- Billing data — company billing address, invoice history (payment card data is tokenised by Stripe; we never store PANs)
- Communications — emails, support tickets, chat transcripts
3. Legal basis (GDPR / DPDP Act 2023)
- Contract — performance of the service you signed up for
- Legitimate interest — fraud prevention, product analytics, security monitoring
- Consent — marketing emails, analytics cookies (opt-in)
- Legal obligation — tax records, regulatory disclosures
4. How we use your data
To deliver, secure, and improve the ORQYNE service; provide customer support; send transactional emails; meet tax / audit / regulatory obligations; and (with consent) send product newsletters and event invitations.
5. Sharing & sub-processors
We share data only with: (a) sub-processors that operate the platform under contractual confidentiality (cloud hosting, email delivery, payment processing, observability); (b) authorities under valid legal process; (c) acquirers in a merger / acquisition, subject to confidentiality. A current sub-processor list is available on request.
6. Data retention
Account data is retained for the life of the contract + 6 months for backup recovery. Billing data is retained for 7 years per tax law. Marketing data is retained until consent is withdrawn. Workspace content is deleted on customer request within 30 days of contract termination.
7. Your rights
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion (subject to legal retention requirements)
- Portability — receive your data in a machine-readable format
- Object — to processing based on legitimate interest or for direct marketing
- Withdraw consent — at any time for consent-based processing
8. International transfers
Data may be transferred between India (Bengaluru) and the United States (Austin) and other regions where our sub-processors operate. Transfers are protected by Standard Contractual Clauses (SCCs), the EU-US Data Privacy Framework where applicable, and adequacy decisions where they exist.
9. Security
Encryption in transit (TLS 1.2+) and at rest (AES-256), httpOnly + Secure session cookies, role-based access control, SOC2 Type II audit programme, and 24×7 security monitoring. Reported vulnerabilities are acknowledged within 24 hours.
Governing law
This document is governed by the laws of India for engagements originating from the Corporate Office in Bengaluru, and by the laws of the State of Texas, USA for engagements originating from the Headquarters in Austin. Forum selection follows the engagement origin.
Contact for legal matters
For any legal notice, data-subject request, or compliance enquiry related to this document, contact support@orgainse.com with the relevant subject line (“Privacy”, “DPA Request”, “SLA Claim”, “Cookie Preferences”, etc.).