Privacy policy.
Understand what happens when you ask Orion a question.
1. Who this notice covers
This draft describes the current Orion public preview, a product by Waggle. The legal operator, registered address, and privacy contact are not yet specified. They must be added before public deployment.
2. Information processed
| Category | Current behaviour |
|---|---|
| Prompts and follow-ups | Sent from your browser to the running application backend to prepare answers. |
| Recent threads | The current interface stores recent conversations in this browser using local storage (up to 50 chats). |
| Research requests | Search queries derived from your prompt may be sent to external search services. Their policies apply to their processing. |
| Connection information | The host receives network metadata to serve requests. The public service uses short-lived, hashed IP rate counters in memory. Infrastructure logs may record operational information. Search results may be cached on the server; browser data controls do not delete server caches. |
| Optional model integrations | If an operator enables an external provider, prompt and source content may be transmitted to that provider. The default public UI presents Orion One. |
3. Why information is used
The current app processes requests to search for information, construct responses, display sources, provide follow-ups, and restore recent threads. Operators may need technical information to maintain availability, investigate faults, and prevent abuse. The applicable legal basis for each processing activity must be documented for the final operating entity and audience.
4. Services and third parties
Search services, configured inference providers, hosting operators, and proxy gateways may process requests as part of the configured service. The public website loads fonts from Google Fonts. The workspace uses local assets and system fonts. Opening source links contacts the source website. Public GitHub imports contact api.github.com from your browser and retrieve public repository information and README content. These services can receive connection metadata.
The current deployment’s processor list, contract terms, processing locations, and international-transfer arrangements have not been finalised. Do not submit confidential material or sensitive personal information to this preview.
Connected sources and profile
Profile name, optional uploaded photo, preferences, imported text files, and public GitHub README content are stored in this browser. Imported sources are searched locally as excerpts and are not automatically sent to the answer backend. Source search is extractive, not model-generated. Source content and profile settings can be deleted in Settings. Cloud account connectors (Google Drive, Gmail, Notion, and Slack) are not configured in this preview; no account access is requested by their cards.
5. Retention
Browser history remains until you clear it in the Library, clear site data in your browser, or it is displaced by newer entries. Clearing the Library affects local thread history; it does not erase requests or logs held by the backend or third parties. Backend caches, logs, backups, and provider retention must be inventoried and assigned retention periods before public use. This notice does not promise immediate server-side deletion.
6. Model training
This draft makes no commitment that prompts are excluded from training or product improvement. That policy, any opt-out controls, and the terms of configured providers must be established and disclosed before public deployment.
7. Your choices and rights
You can stop using the preview, avoid providing personal information, clear saved local threads, and clear site data through your browser. Depending on applicable law, rights may include access, correction, deletion, restriction, objection, portability, withdrawal of consent, and a complaint to the competent authority. The final privacy contact and request process must be provided before public use; do not send identification documents through the question composer.
8. Security and sensitive decisions
No online system can promise absolute security. The local preview has not been represented as independently audited or suitable for regulated data. Do not enter passwords, payment credentials, health records, government identifiers, or confidential third-party information.
9. Children
This preview is intended for adult evaluation. It is not designed for children. The final service must define its age eligibility and any required parental-consent process before public launch.
10. Updates and contact
This draft was prepared on 29 October 2026. Material changes to the deployed service require corresponding notice updates. Privacy contact: to be confirmed by the operator before public launch.
Reference
For UAE background, see the UAE Government’s data protection overview. Applicability depends on the actual operator, location, activities, and users; this is not a claim of statutory compliance.