orkaIf you contacted a business through its Orka chat, start with that business for questions about your conversation. For your own Orka account or this website, contact [email protected].
1. Who handles your data
Orka is operated by BIGMO SAS, 14 Rue Charles IV, 75004 Paris, France. BIGMO SAS handles personal data relating to its website visitors, account holders, billing and support. For privacy questions or requests, email [email protected].
If you chat with another business using Orka, that business decides how it uses the conversation and visitor information. It is your first contact for requests about that relationship. Orka processes customer conversation data in order to provide the service under the applicable customer arrangement.
2. Information involved
- Account and business information: your name, email address, any phone or company details you provide, subscription information and billing or payment-related records.
- Conversation content: messages, files, internal notes and information supplied by the business running a workspace. AI features also process the material you give them, such as questions, selected context, documentation and help articles.
- Technical and usage information: IP address, browser and device information, session activity and service logs. Visitor features can show page activity, approximate location and customer attributes supplied through an integration.
- Information from connected services: relevant account, transaction or customer context supplied by an integration you choose to use. Its own privacy notice also applies.
Providing information for an optional feature is your choice. Some account, security and billing details are necessary to provide a subscription or handle a request; without them we may not be able to do so.
3. This marketing website
We use Clicks.page for marketing website analytics, including page views and outgoing link clicks. Its script receives the current page URL and referring page. It respects the browser’s Global Privacy Control and Do Not Track signals.
Our landing page and feature catalogue use local illustrations and example conversations. The displayed visitor map and profile details are demonstration data. Messages entered in the labeled product demonstrations stay in the current page. The floating Orka widget is our real support chat: messages sent there reach our team, along with the visitor context needed to provide support.
The site uses a fixed green theme. Any old color preference is removed when the current site loads. Searching the feature catalogue happens in your browser; the selected business profile can appear in the page URL. These interactions do not create an Orka account.
When you request “See Orka on your website”, your browser sends the public website origin you enter to our preview service. The service fetches public homepage metadata and can temporarily cache the result for up to one hour. The preview can load that website and its favicon in your browser, so the external site may receive your IP address and apply its own privacy and storage rules. Close the preview to stop displaying it.
When automatic screenshots are available, a website that blocks embedding can be displayed as a static image. Cloudflare Browser Run visits only the public homepage in a separate browser, without your login, account paths, query strings or cookies. Public homepage images may be cached for up to 24 hours. You can also upload an image locally: these uploaded screenshots stay in your browser and are never sent to our server. The demonstration widget remains interactive; no demo message is sent.
The “Ask anything else” FAQ form sends the question you choose to submit and selected public website excerpts to OpenAI’s GPT-5 mini through our Cloudflare server. It does not include your widget conversations, account details or other browsing history. Do not enter sensitive or personal information. This function answers general product questions, shows links to its website sources and offers email contact as an alternative. The generated answer may be inaccurate.
Our FAQ function does not save questions or answers in a database. It requests no persistent Responses API storage using store: false. OpenAI may still retain data under its applicable API policies, including abuse monitoring; this setting is not a zero-retention guarantee. See OpenAI’s API data controls. Temporary in-memory request counters help limit abuse. The separate support widget retains conversations according to the support service’s arrangements.
Cloudflare serves this website and processes network requests needed to deliver and protect it. The account dashboard is a separate service and origin. Clicking an account link takes you there.
4. Why we process information
| Purpose | Basis where GDPR applies |
|---|---|
| Set up and deliver your account, subscription and requested features | Steps you request before a contract and performance of that contract |
| Respond to support enquiries, protect the service and troubleshoot faults | Contract performance or our legitimate interests in operating a reliable, secure service |
| Maintain billing records and respond to lawful obligations | Legal obligations |
| Optional marketing or non-essential tracking, where used | Consent when required; you can withdraw it |
The business using an Orka workspace is responsible for the legal basis for its own customer conversations, integrations and visitor features. Contact that business for details.
5. AI features and your choices
AI drafts, automatic replies, summaries and translations require processing the relevant content through the AI configuration selected for the workspace. Orka supports provider choices including OpenAI, Anthropic and OpenRouter. When you select OpenRouter, requests are routed through OpenRouter to the model provider selected in your configuration. The information sent depends on the feature and the context supplied to it.
Your provider choice and account arrangement determine the provider terms that apply. Connecting your own key does not mean the content avoids that provider. Review provider terms before enabling AI for confidential information. Provider retention periods and rules for using data to train models depend on the provider and agreement that apply to your configuration.
You can choose whether to use AI assistance and control it per conversation where available. A suggested draft is distinct from an enabled automatic reply. Ask a person to review important answers.
7. How long information is kept
We keep information for the period needed for its purpose and applicable legal obligations. The relevant criteria are the life of your account or customer relationship, the conversation history needed to provide the service, outstanding support or security issues, and legal record-keeping or dispute requirements.
A deletion request is assessed against those requirements. Where a business controls a conversation, its instructions and retention arrangements also matter. Contact us for information about a specific record or account; this notice does not promise a single deletion period for every type of data.
Public website metadata is cached for at most one hour, and automatic public homepage screenshots for at most 24 hours. Demonstration chat content lasts only in the loaded page. The FAQ answer stays in the current page, while OpenAI’s processing is governed by the API policies linked above. We no longer save a color choice.
8. Security and international processing
We use technical and organizational measures to protect information and manage access. No online service can guarantee absolute security. Keep your credentials and provider keys private and report suspected unauthorized access promptly.
Service providers can process information in countries outside the European Economic Area. Where GDPR requires a transfer mechanism, appropriate safeguards such as applicable adequacy decisions or contractual safeguards must cover the transfer. Contact us for the safeguards relevant to your account and how to obtain information about them.
9. Your rights
Depending on the law and circumstances, you can ask for access, correction, deletion, restriction, portability, or object to processing. You can withdraw consent for future processing without invalidating earlier lawful processing. You can also object to direct marketing.
Send your request to [email protected]. Tell us enough to identify the relevant account or conversation. We may need proportionate information to verify a request before disclosing data. We respond within the applicable legal time limits. If another business controls the data, we will direct you to it or assist it as appropriate.
You can complain to your data protection authority. In France this is the CNIL. More information about your GDPR rights is available from the CNIL’s rights guide.
10. Changes and contact
We update this notice when the service or its processing changes. The date above identifies this version; material changes will be communicated when required. Write to [email protected] or BIGMO SAS, 14 Rue Charles IV, 75004 Paris, France with questions about this notice.