Privacy Policy
Last updated: February 19, 2026
1. Introduction
Orchestra ("we", "us", "our") provides a management portal for deploying and configuring AI agent teams powered by OpenClaw. This Privacy Policy explains how we collect, use, and protect your information when you use our service at orchestra.dugaly.com.
2. Information We Collect
Account Information: When you create an account, we collect your email address for authentication purposes. We use a passwordless one-time-code system.
Google Account Data: If you connect your Google account, we store an OAuth refresh token to access the Google services you authorize (Gmail, Calendar, Drive, Contacts, Sheets, Docs). We do not store your Google password.
Instance Configuration: We store your AI agent deployment settings, including provider API keys (encrypted), channel configurations, and agent definitions.
Usage Data: We collect basic usage logs to maintain service reliability, including login timestamps and deployment events.
3. How We Use Your Information
We use your information solely to provide and maintain the Orchestra service: authenticating your identity, deploying and managing your AI agent instances, connecting your authorized third-party accounts, and communicating service updates.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Data Storage & Security
Your data is stored in a PostgreSQL database hosted on Railway infrastructure. Sensitive credentials (API keys, OAuth tokens) are encrypted at rest. All connections use HTTPS/TLS encryption in transit.
We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.
5. Third-Party Services
Orchestra integrates with third-party services including Google APIs (Gmail, Calendar, Drive, Contacts, Sheets, Docs), Telegram, and AI model providers (Anthropic, OpenAI, Google AI). Each service is governed by its own privacy policy. We only access the scopes you explicitly authorize.
6. Your Rights
You may disconnect third-party accounts at any time from the Channels page. You may request access to, correction of, or deletion of your personal data by contacting us at contact@dugaly.com.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email.
8. Contact
For questions about this Privacy Policy, contact us at contact@dugaly.com.