Who we are
ORQO is a customer conversations platform operated by Ahmed Ragab, trading as ORQO, with a principal place of business in Giza, Egypt (“ORQO”, “we”, or “us”). This policy explains how we handle personal data when you use our website and platform.
Our role in processing data
We deal with two kinds of data:
- Your account data as an ORQO customer, such as your name, email, and billing details. We are the controller of this data.
- Your customers’ data that you manage inside ORQO, such as contacts, messages, and orders. You are the controller of it; we process it on your behalf and only according to your instructions.
If you are a customer of a company that uses ORQO and want to exercise your data rights, contact that company directly, and we will help them fulfil your request.
The data we collect
- Account data: name, email, phone number, organization and workspace names, and login and two-factor authentication data.
- Billing data: plan, subscription date, and payment and invoice history. Card data is processed by the payment gateway; we do not store full card numbers.
- Business data: contacts, custom fields, tags and notes, messages and media, campaigns and templates, automation, orders from the connected store, and the knowledge files you add to AI agents.
- Meta channel data: when WhatsApp, Instagram or Messenger is connected: account and number identifiers, access tokens, incoming and outgoing messages, and delivery and read states.
- Usage data: technical logs, device and browser type, platform usage events, error reports, and notification identifiers.
- Communication data: what you send us via email, the contact form, or support.
How we use data
- Providing the platform: receiving and sending messages, running campaigns and automation, and showing reports.
- Operating AI agents according to the settings you define.
- Managing subscriptions, billing, and usage limits.
- Providing support and contacting you about your account.
- Protecting the platform and preventing abuse.
- Improving the product using aggregated usage data.
- Complying with legal requirements.
We do not sell personal data, and we do not use your customers’ data for our own marketing purposes.
Artificial intelligence
When you enable an AI agent, we send the relevant conversation text, the customer-profile data the agent needs, and excerpts from the knowledge sources you added, to an AI model provider to generate the reply. Knowledge sources are indexed in a search base dedicated to your workspace.
The platform logs what the agent does in the conversation history and the run log, and you can stop the agent or take over the conversation manually at any time.
We do not use your data or your customers’ data to train ORQO models or third-party general-purpose AI models. We use providers’ business or API services under terms that do not permit model training on submitted data by default. A provider may retain inputs and outputs for a limited period for security and abuse monitoring under its terms. If we ever offer an optional feature that uses data for model improvement, it will be off by default and we will ask for your express consent before enabling it.
Service providers
We rely on trusted providers to run the platform, and share only what is necessary for their role:
| Provider | Purpose |
|---|---|
| Cloudflare | Traffic delivery, security, and abuse prevention |
| Vercel | Hosting the public ORQO website |
| Meta | WhatsApp, Instagram and Messenger channels |
| Clerk | Login and identity management |
| Creem | Payment and subscription processing |
| Appwrite | File and media storage |
| OpenAI · Anthropic · Google Gemini | AI models for agents and summaries |
| Qdrant | Indexing knowledge sources for search |
| Pusher | Real-time updates inside the platform |
| OneSignal | Browser and mobile notifications |
| Google Analytics · Microsoft Clarity · PostHog | Website and product analytics, including session replay where enabled |
| Sentry | Technical error tracking |
| Email provider | Account messages and notifications |
| The integrations you connect | Google Sheets and Meet, Shopify, WooCommerce, EasyOrders, and n8n — only when enabled from your account |
We may disclose data if a competent authority lawfully requests it.
Transferring data outside your country
ORQO uses distributed cloud infrastructure rather than a single main server location. The application is delivered through Cloudflare, and our providers may store or process data in the European Economic Area, the United States, and other countries where they operate. Some providers may therefore process data outside Egypt or Saudi Arabia. We choose providers that apply appropriate safeguards, use contractual and technical protections for international transfers, and comply with transfer requirements under applicable law. You may contact us for current information about the location used for a particular category of data.
Retention period
We keep account and workspace data while your account is active and as needed to provide the service. When a workspace or account is deleted, its active data is deleted or anonymized within 30 days and ages out of encrypted backups within 90 days. Security logs are normally kept for up to 12 months. Billing, tax, dispute, and fraud-prevention records may be kept for up to 7 years, or longer where the law requires it. We may keep anonymized data that can no longer identify you.
Data deletion
You can delete contacts and conversations from inside the platform, and disconnect any channel from the channel settings, which deletes its access tokens.
To request deletion of your account or all of your data, email us at hello@orqo.site with the subject “Data deletion request” from the email registered on the account. We will acknowledge the request and complete or explain our response within 30 days, subject to identity verification, legal retention duties, and any extension allowed by applicable law.
If you contacted a company that uses ORQO via WhatsApp, Instagram or Messenger and want your data deleted, ask the company itself, or email us and we will forward your request to them.
Data protection
- Encrypted connection between your browser and the platform.
- Private files that open only for a signed-in user or via a signed temporary link.
- Verification of message signatures coming from payment gateways and channels.
- Roles and permissions inside every organization and workspace, plus two-factor authentication.
- Logs of what the AI agent does inside conversations.
No system is completely secure, but we review our measures continuously, and we will notify you as required by law if a breach affects your data.
Your rights
Under the applicable laws, such as Saudi Arabia’s Personal Data Protection Law and Egypt’s Personal Data Protection Law No. 151 of 2020, you have the right to:
- Know the data we hold about you and obtain a copy of it.
- Correct inaccurate data.
- Request deletion of your data.
- Object to some kinds of processing or restrict it.
- Withdraw your consent where processing is based on it.
To exercise any of these rights, email us at hello@orqo.site.
Cookies
We use essential cookies for login and session protection, cookies that store your preferences such as language and appearance, and analytics tools that help us understand product usage. You can control them from your browser settings.
Children
ORQO is intended for businesses, and we do not provide the service to anyone under 18.
Changes
We may update this policy. We show the last-updated date at the top of the page, and we will notify you inside the platform or by email of any material change.
Contact us
For any privacy question, request, or complaint, contact Ahmed Ragab, trading as ORQO, Giza, Egypt, at hello@orqo.site.