1. Scope
This Private Beta Privacy Notice explains how Orthotropy handles information for Closed Beta access.
Orthotropy is operated by 正向演繹科技有限公司, a company registered in Taipei City, Taiwan, which is the controller responsible for the information described here.
The contact-intake disclosures on this page use notice version 2026-07-leads-v1.
Orthotropy provides Growth Intelligence for the Superworker through a Strategy workflow informed by public market evidence, context you provide, and service usage data.
2. Information we collect
Account and contact information, such as name, email address, company, role, authentication provider, and communication history.
Strategy inputs, such as company names, product names, public domains, competitors, market signals, decision questions, constraints, and optional context you submit.
Service data, such as Company Context results, saved Strategy materials, source gaps, refresh history, plan labels, and product activity.
Technical data, such as IP address, device and browser information, referrer, page views, error logs, security logs, and cookie or session identifiers.
An accepted contact request includes your optional name, email address, message, selected topic, optional affected URL, route, campaign and sample attribution, receipt time, signed session and form-token data, and pseudonymous HMAC rate-limit keys derived from IP, email, and session data.
For contact-form abuse control, the raw IP address is processed transiently to derive a pseudonymous rate-limit key and is not stored in the lead record.
Closed Beta access does not collect payment card data or create checkout, subscription, or invoice records.
3. Information you should not submit
Do not submit passwords, private keys, API keys, raw access tokens, session cookies, sensitive personal data, regulated health data, payment card data, or confidential third-party data unless a separate written agreement allows it.
Do not submit private analytics, CRM data, internal documents, or customer records unless you have the rights to do so and the product clearly requests that context.
4. How we use information
Provide, operate, secure, and improve the website, account system, and Strategy workflow.
Prepare Company Context, support Strategy materials, identify evidence gaps, and provide other features expressly presented in the service.
Authenticate users, manage access, process support requests, and prevent abuse.
Use contact-request information to respond to inquiries, evaluate beta-access or workflow fit, coordinate collaborations, handle privacy requests, secure the form, prevent abuse, and keep an operational record.
Measure product usage, diagnose errors, improve reliability, and support reliable operation.
Send service communications or account notices where enabled; this notice does not authorize marketing messages.
Comply with legal obligations, enforce our terms, and protect rights, safety, and security.
5. AI and automated processing
This notice does not itself authorize automated processing beyond the features expressly made available to you.
Closed Beta materials may include recorded, projected, or AI-assisted content only when the service clearly identifies that content.
AI-assisted materials can contain errors, outdated context, unsupported assumptions, or incomplete evidence. You are responsible for review before relying on them for business, legal, financial, compliance, hiring, medical, or other high-stakes decisions.
Generating Company Context and Strategy materials uses AI, research, and other third-party service providers to process the company, domain, or URL and profile context you submit, and to produce complete, evidence-based analysis. We do not use login-gated, paywalled, private, or social-platform content for this purpose, and you should not submit special-category or other sensitive personal data for it.
We do not persist raw provider request or response payloads, or provider credentials, in customer-visible records. Generated materials and operational logs reference this processing using safe identifiers rather than provider payload contents.
7. Sharing and service providers
Closed Beta may use limited service providers needed to run the preview, such as hosting, authentication, reliability, or support services.
Company Context and Strategy generation uses AI, research, and other third-party service providers as subprocessors to process the company, domain, or URL and profile context you submit and to produce complete, evidence-based analysis. Core infrastructure and model providers — Google Cloud, Firebase, Cloudflare, Resend, Anthropic (Claude), OpenAI (ChatGPT), Gemini (Google) — are named on our Security page; the identity of the evidence-research provider is kept out of public disclosure as an operational-security practice, and a full subprocessor list is available on request under an appropriate agreement.
Accepted contact requests use Google Cloud and Firebase for App Hosting, Firestore, Functions, logging, and Secret Manager. The raw name, email, message, affected URL, and source context stay in the Google Cloud and Firebase processing path used for the lead record.
An operational alert is sent to a controlled internal mailbox to flag that a contact request arrived. That alert is limited to a random lead ID, topic, receipt time, and console link; it does not include the visitor's name, email, message, affected URL, IP-derived value, or other free text.
Payment collection, automated processing beyond the presented features, outbound marketing messages, and public analytics are outside this notice's scope.
We may disclose information if required by law, legal process, security investigation, rights protection, business transfer, or with your direction or consent.
We do not sell your Strategy inputs, Company Context results, account information, or private context.
8. International transfers
Orthotropy may process information in countries other than where you live. Those countries may have different privacy and data protection laws.
Contact intake may involve Google Cloud and Firebase, Resend, and Gmail processing under their applicable terms and subprocessors.
Where applicable law requires a specific transfer mechanism for a given transfer, we intend to put appropriate contractual, technical, and organizational safeguards in place for it.
9. Retention
We keep information for as long as needed to provide the private preview, maintain account history, support Strategy refreshes, comply with legal obligations, resolve disputes, prevent abuse, and enforce terms.
For Company Context and Strategy generation, our service providers' standard retention generally deletes inputs and outputs within approximately 30 days, absent a policy-enforcement flag; we do not currently claim a zero-data-retention arrangement with any such subprocessor. Generated Company Context and Strategy materials are retained by Orthotropy per workspace, under tenant-level access controls, per the schedule in this section.
The contact-intake schedule keeps raw lead records and alert state for 180 days from receipt, rate-limit records for 48 hours after their last update, and body-free application and security logs for 30 days. Scheduled deletion can occur after the retention date rather than at the exact expiry second.
A lead converted into a separately governed account or customer record moves to the policy and retention schedule for that record. Documented legal, security, or abuse-prevention exceptions may require limited longer retention; backups for the lead database must not be enabled until their treatment is approved.
Deletion and export requests may be limited during Closed Beta while those request processes are being validated.
We may keep limited security and service information longer where required for abuse prevention, legal compliance, or service integrity.
10. Security
We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration.
No internet service is completely secure. You are responsible for keeping account credentials and access devices secure.
11. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information.
You may request access, correction, export, or deletion through our privacy-request contact form. We may verify the requester's identity and may need to keep limited information for legal, security, or abuse-prevention reasons.
If you are in the European Economic Area, the UK, or Switzerland, applicable law may also give you the right to lodge a complaint with your local data protection authority. We do not sell personal information and have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months; to the extent California, Nevada, or other US state law gives you a right to know, delete, correct, or opt out of sale or sharing, you can exercise it through the same contact-request process, subject to the Closed Beta limitations described in the Retention section above, and we will not discriminate against you for exercising it.
Submitting a contact or access request is not consent to newsletters or marketing. This website does not send marketing email.
12. Children
Orthotropy is intended for business users and is not directed to children. Do not use the service if you are under the age required to consent to online services in your location.
13. Changes
We may update this Privacy Policy as the service changes. Material changes will be reflected by updating the date on this page and, when appropriate, by additional notice.
14. Contact
Questions or requests about privacy can be submitted through our privacy-request contact form.