orkaIf you contacted a business through its Orka chat, start with that business for questions about your conversation. For your own Orka account or this website, contact [email protected].
1. Who handles your data
Orka is operated by BIGMO SAS, 14 Rue Charles IV, 75004 Paris, France. BIGMO SAS handles personal data relating to its website visitors, account holders, billing and support. For privacy questions or requests, email [email protected].
If you chat with another business using Orka, that business decides how it uses the conversation and visitor information. It is your first contact for requests about that relationship. Orka processes customer conversation data in order to provide the service under the applicable customer arrangement.
2. Information involved
- Account and business information: your name, email address, any phone or company details you provide, subscription information and billing or payment-related records.
- Conversation content: messages, files, internal notes and information supplied by the business running a workspace. AI features also process the material you give them, such as questions, selected context, documentation and help articles.
- Technical and usage information: IP address, browser and device information, session activity and service logs. Visitor features can show page activity, approximate location and customer attributes supplied through an integration.
- Information from connected services: relevant account, transaction or customer context supplied by an integration you choose to use. Its own privacy notice also applies.
Providing information for an optional feature is your choice. Some account, security and billing details are necessary to provide a subscription or handle a request; without them we may not be able to do so.
3. This marketing website
Our landing page and feature catalogue use local illustrations and example conversations. The displayed visitor map and profile details are demonstration data. Messages typed into the demonstration chat stay in the current page and are not sent to a support agent.
The color selector saves one preference in your browser. Searching the feature catalogue happens in your browser; the selected business profile can appear in the page URL. These interactions do not create an Orka account.
When you request “See Orka on your website”, your browser sends the public website origin you enter to our preview service. The service fetches public homepage metadata and can temporarily cache the result for up to one hour. The preview can load that website and its favicon in your browser, so the external site may receive your IP address and apply its own privacy and storage rules. Close the preview to stop displaying it.
Cloudflare serves this website and processes network requests needed to deliver and protect it. The account dashboard is a separate service and origin. Clicking an account link takes you there.
4. Why we process information
| Purpose | Basis where GDPR applies |
|---|---|
| Set up and deliver your account, subscription and requested features | Steps you request before a contract and performance of that contract |
| Respond to support enquiries, protect the service and troubleshoot faults | Contract performance or our legitimate interests in operating a reliable, secure service |
| Maintain billing records and respond to lawful obligations | Legal obligations |
| Optional marketing or non-essential tracking, where used | Consent when required; you can withdraw it |
The business using an Orka workspace is responsible for the legal basis for its own customer conversations, integrations and visitor features. Contact that business for details.
5. AI features and your choices
AI drafts, automatic replies, summaries and translations require processing the relevant content through the AI configuration selected for the workspace. Orka supports provider choices including OpenAI and Anthropic. The information sent depends on the feature and the context supplied to it.
Your provider choice and account arrangement determine the provider terms that apply. Connecting your own key does not mean the content avoids that provider. Review provider terms before enabling AI for confidential information. Provider retention periods and rules for using data to train models depend on the provider and agreement that apply to your configuration.
You can choose whether to use AI assistance and control it per conversation where available. A suggested draft is distinct from an enabled automatic reply. Ask a person to review important answers.
7. How long information is kept
We keep information for the period needed for its purpose and applicable legal obligations. The relevant criteria are the life of your account or customer relationship, the conversation history needed to provide the service, outstanding support or security issues, and legal record-keeping or dispute requirements.
A deletion request is assessed against those requirements. Where a business controls a conversation, its instructions and retention arrangements also matter. Contact us for information about a specific record or account; this notice does not promise a single deletion period for every type of data.
The website preview cache lasts at most one hour. Demonstration chat content lasts only in the loaded page. Your saved color choice remains in your browser until it is changed or cleared.
8. Security and international processing
We use technical and organizational measures to protect information and manage access. No online service can guarantee absolute security. Keep your credentials and provider keys private and report suspected unauthorized access promptly.
Service providers can process information in countries outside the European Economic Area. Where GDPR requires a transfer mechanism, appropriate safeguards such as applicable adequacy decisions or contractual safeguards must cover the transfer. Contact us for the safeguards relevant to your account and how to obtain information about them.
9. Your rights
Depending on the law and circumstances, you can ask for access, correction, deletion, restriction, portability, or object to processing. You can withdraw consent for future processing without invalidating earlier lawful processing. You can also object to direct marketing.
Send your request to [email protected]. Tell us enough to identify the relevant account or conversation. We may need proportionate information to verify a request before disclosing data. We respond within the applicable legal time limits. If another business controls the data, we will direct you to it or assist it as appropriate.
You can complain to your data protection authority. In France this is the CNIL. More information about your GDPR rights is available from the CNIL’s rights guide.
10. Changes and contact
We update this notice when the service or its processing changes. The date above identifies this version; material changes will be communicated when required. Write to [email protected] or BIGMO SAS, 14 Rue Charles IV, 75004 Paris, France with questions about this notice.