Policy

Privacy

Last updated 12 August 2026

orqly is a business tool that measures public AI answers. We hold very little personal data, we do not sell any of it, and we do not use it to train models.

Who we are

orqly at getorqly.com is operated by orqly, operated by Muhammad Faizan (sole proprietor), of Plot 136, Block 7/8, C.P. Berar Society, Karachi, Pakistan, who is the data controller for the information described here. Questions, requests and complaints: hello@getorqly.com.

What we collect

Account information

Your email address, your name if you give one, and — if you sign in with Google — the basic profile your Google account returns. Authentication is handled by Clerk. We never see or store your password, and if you use Google sign-in we never receive your Google password at all.

What you put into the product

The brands, domains, competitors, prompts, topics and countries you choose to track, plus any team members you invite by email. This is business information you supply deliberately, and it is what the product exists to process.

What the product collects on your behalf

Answers returned by AI engines to the prompts you track, the sources and links those answers cite, and pages we fetch from public websites — your own and your competitors’. All of it is publicly available information. We do not log into anything on your behalf and we do not collect data about individual people.

Payment information

We never see your card details. Payments are processed by Paddle, who act as merchant of record. We receive only your subscription status, plan and billing country.

Technical information

Ordinary server logs (IP address, browser type, pages requested) kept for security and debugging. For the free public Crawl Check tool we store the URL checked and a salted one-way hash of the IP address — never the address itself — solely to enforce a rate limit and cache results.

Why we are allowed to hold it

  • To perform our contract with you — running your account, collecting the data you asked for, taking payment.
  • Legitimate interests — keeping the service secure, preventing abuse of free tools, and improving the product.
  • Consent — for marketing email, which you can withdraw at any time.
  • Legal obligation — keeping tax and invoicing records.

Who else processes it

We use the following categories of sub-processor. Each receives only what it needs to do its job, and none of them are permitted to use your data for their own purposes.

  • Clerk — authentication and session management.
  • Supabase — the database holding your projects and results.
  • Vercel — application hosting and delivery.
  • Paddle — payment processing, invoicing and tax.
  • Data-collection providers — specialist services that retrieve public AI answers and public web pages on our behalf.
  • AI model providers — used to analyse those answers and generate suggestions.

The providers we hold your account and payment data with are named individually, because that is what you would want to check. The last two categories cover our data-collection and analysis suppliers, which change as the AI engines themselves change. A current list of every named sub-processor is available on request — email hello@getorqly.com and we will send it.

We do not sell your data, and we do not share it for advertising. Content you enter is not used to train any AI model — where we send text to a model provider, it is sent for that single request and for no other purpose.

Where it is stored

On servers operated by the providers above, which may be located outside your country, including in the United States and the European Union. Where personal data leaves its region we rely on the transfer mechanisms those providers have in place, such as Standard Contractual Clauses.

How long we keep it

  • Collected answers and citations — for the retention window of your plan (30 days on Starter, 90 on Pro), after which older records are automatically pruned.
  • Your account and projects — until you delete them, or for 30 days after a subscription ends.
  • Free Crawl Check records — hashed IP and checked URL, no more than 30 days.
  • Invoices and tax records — as long as the law requires, typically several years.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to processing based on legitimate interests. You can also export most of it yourself as CSV from within the product at any time.

Email hello@getorqly.com and we will respond within 30 days. If you are in the UK or EU and are unhappy with our response, you have the right to complain to your local data protection authority.

Cookies

We use cookies that are strictly necessary to run the site — keeping you signed in and keeping your session secure. We do not use advertising or cross-site tracking cookies. If we add product analytics later, this page will be updated before they are switched on.

Children

orqly is a business tool and is not directed at anyone under 16. We do not knowingly collect their data; if we learn that we have, we will delete it.

Security

Data is encrypted in transit and at rest. Access between customers is enforced at the database level by row-level security, not only in application code, so a bug in a query cannot expose another customer’s rows. If we ever suffer a breach affecting your data, we will tell you.

Changes

If we change this policy materially we will update the date at the top and, for significant changes, email you before they take effect.