Privacy Policy

Last Updated: May 9, 2026

At Orange AI ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Customer Service RAG Platform (the "Service").

1. Information We Collect

We collect information that you provide directly to us, including:

• Account Information: Name, email address, and organization details when you register.
• User Content: Documents, text, and data you upload to your Knowledge Base.
• Communication Data: Chat logs and messages processed through our Service (e.g., via LINE or Web Widget).
• Google Workspace Data: If you choose to integrate Google Calendar or Google Docs, we access and process information from these APIs to provide AI assistance based on your instructions.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process and respond to customer service inquiries via AI agents.
• Access, read, and append to your Google Calendar events and Google Docs documents solely based on your explicit commands given to the AI agents.
• Authenticate users and secure our platform.
• Communicate with you about updates, security alerts, and support messages.

Note on AI Training: We do not use your proprietary Knowledge Base data to train our public foundational AI models. Your data is indexed solely for the purpose of retrieving answers for your specific organization (RAG).

3. Data Storage and Security

Your data is stored securely on Google Cloud Platform (GCP) and Firebase services.

• Database: Firestore (Authentication, Chat Logs, Metadata, OAuth Tokens).
• Files: Firebase Storage (Uploaded Documents).
• Vectors: Cloud Firestore / Vector Store (Embeddings).

We implement industry-standard security measures to protect your personal information. OAuth refresh tokens are securely stored, and we do not access your Google accounts outside the scope of executing your direct AI agent requests. However, no method of transmission over the Internet or electronic storage is 100% secure.

4. Google API Services Usage (Limited Use Policy)

Orange AI's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

5. Third-Party Services

We may share data with trusted third-party service providers solely to provide the Service:

• Google Gemini (via Vertex AI/Genkit): For generating AI responses.
• Messaging Platforms (LINE, Facebook): To send and receive messages as configured by you.

6. Your Data Rights

You have the right to access, correct, or delete your personal information stored in our Service. You can manage your organization's data directly through the Orange AI dashboard or contact us for assistance.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at service@orangeai.tw.