Privacy Policy

Effective October 28, 2026

Ornus is a desktop workspace for Mac. This policy explains what information Ornus collects through its website (ornus.ai), its accounts service (accounts.ornus.ai) and the Ornus app, how it is used, and the choices you have. Questions: [email protected].

What stays on your Mac

Your projects, code, files, chats, notes, memory and the AI keys or subscriptions you connect stay on your device. Ornus does not upload them to its servers. When you use an AI model, your request goes from your Mac directly to the provider you chose (for example Anthropic or OpenAI), under that provider's own terms and privacy policy. Ornus does not receive or store those requests.

What goes with a request is what the task needs: your messages, and the parts of files, screenshots, web pages, app windows or tool results that Ornus Code or an employee works with. Tools you connect (MCP servers, websites, your own web server when you publish to it) receive what you or the agent send them, under their own terms.

Information we collect

• Account information from sign-in. With Google, we receive the account identifier Google gives us, your email address, and your name and profile picture link when available. With Apple, we receive the account identifier Apple gives us and, when available, your name and email address; Apple may give us a private relay email instead of your real one.
• Device information. For each Mac signed in to your account: a random install identifier, the device name, the macOS version and the Ornus version, so you can see and sign out your devices. The install identifier also lets a free Pro preview or a gift be used only once per Mac.
• Subscription and payment records. PayPal processes subscriptions, and NOWPayments processes USDT payments. We keep the payment and subscription identifiers, status, plan, amounts, currency, fees and dates, and the transaction details the processor returns. We never receive your card number or bank login. If you ask for a refund of a USDT payment, we also keep the wallet address you give us; blockchain transactions and addresses are public and cannot be erased from the blockchain.
• Checkout records. When you subscribe, we keep the offer and the policies you agreed to, the time, your IP address and browser type, so we can show what you agreed to if a payment is disputed.
• Access records. For each day your signed-in app contacts our service: the account and device, the first and last contact, the number of requests, the app version, whether Pro was delivered, and the first IP address of that day. We use them for security, to deliver your plan and to answer payment disputes.
• Security and service records. For signed-in browser sessions: the IP address and browser type. For the service: which pages were requested, how long they took and the app version, daily counts of actions such as sign-ins, and security events such as blocked sign-in attempts.
• Feedback and contact messages. When you use «Send feedback» in the app, we receive your message, your account email, your plan, the app version and the interface language. The contact form on ornus.ai sends your message, your email, the name you give and the interface language. Please do not include passwords, API keys or other sensitive information.
• Gifts and Messages. We record the gifts you send and open, the accounts involved and the Mac a gift was opened on. Anyone with your gift link sees your first name; when you open a gift, its sender sees your first name, never your email. For the Messages inbox in the app (account notices, gift updates and our offers), we record when each message was delivered, shown, opened, its button clicked or hidden.
• Waitlist. If you join the Windows waitlist on ornus.ai, your email address is stored by our email provider, Kit, to send you updates. Every email has an unsubscribe link.

Usage statistics

While you are signed in, the Ornus app sends us counts and durations of how the app is used, linked to your account: the minutes Ornus was in the front, the Ornus Code sessions and employee conversations you started, the features you opened (boards, the memory bank, the browser, notes, mail, the Team tab, the checks sheet, the Session menu), and per hour the number of messages you sent to Ornus Code and to employees, the requests and tokens they used and the names of the AI models they ran on, so your account page can show your usage by hour; the app version, the macOS version and the interface language. The country is worked out from the network address of the request and stored instead of the address itself. These numbers never include a project name, a file name, a folder path or any text you write or read.

You control it per project: Settings → General → Privacy → «Share usage statistics». With a folder open the switch belongs to that project; in a window without a folder it is the default every new project starts with. A project whose switch is off sends no usage statistics; signing out stops them too. The switch does not stop the requests Ornus needs to work (sign-in, your plan, payments, gifts, Messages, updates and the checks below), nor the records they create. Without these numbers we cannot see how Ornus is really used, which is why the switch is on by default.

Website statistics

ornus.ai counts its own visits with a small script of ours, with no cookies, no local storage and no outside analytics service. For each page shown and each click on the download link it sends the page, the site language, the website you came from (its name only) and any campaign tags in the link; while the page is open and visible it also says every 45 seconds that it is still open. Our server works out the country and the kind of device (computer, phone or tablet) and estimates visitors with a code made from your network address and browser under a random key that changes every day and is deleted after two days, so a visit cannot be followed from one day to the next or linked to an Ornus account. Your IP address and browser details are not stored in these statistics. A click on the download link is counted, not whether the download finished. The numbers are kept for 400 days.

Creator codes

If you confirm a creator's code in your account, we record which creator referred your account, when and where you confirmed it, and whether your account uses the same Mac as the creator's. We use it with your account's payments to pay that creator their share. The creator sees only counts and amounts, never your name, email or anything you do in Ornus. Opening a creator's link records nothing about you.

Updates and app checks

The app regularly checks our servers for updates and for notices such as a required update, also while you are signed out, and downloads updates from our download service. Our hosting provider and Cloudflare receive the network information needed to answer these requests, including your IP address.

How we use it

• To create your account, sign you in, and keep your devices and sessions secure.
• To provide your plan, previews and gifts, process subscriptions and refunds, and answer billing questions and payment disputes.
• To run, monitor and fix the service, and to prevent abuse.
• To answer your feedback and messages, and to improve Ornus.
• To contact you about your account, to show our own offers in the app, and, if you joined the waitlist, to send you news about Ornus.

We do not sell your information, we do not use it for third-party advertising, and we do not use it to train AI models. To stop our offers, write to [email protected]; account, billing and security notices continue.

We use your information because it is needed for the service you asked for, to meet our legal duties, and, where the law allows, for our legitimate interest in keeping Ornus secure, fixing it, preventing abuse and handling claims. Where the law requires your consent, we rely on it, and you can withdraw it at any time.

Google user data

This section explains how Ornus accesses, uses, stores, shares and deletes the data it receives when you sign in with your Google Account.

• Data accessed. Ornus requests only the basic sign-in scopes: openid, email and profile. From them Ornus receives your Google account identifier, your email address, your name and your profile picture link. Ornus does not request access to Gmail, Drive, Calendar, Contacts or any other Google data.
• Data usage. This data is used to create and run your Ornus account: to sign you in, recognize you when you sign in again, show your name and picture in Ornus and on your account page, contact you about your account, answer your feedback and support requests, handle payments and payment disputes, and show your first name in gifts as described above.
• Data storage. It is stored in the Ornus accounts database on our own server, reached only over HTTPS, with encrypted daily backups.
• Data sharing. Ornus does not sell or rent Google user data, does not use it for advertising, and does not use it to develop, improve or train AI or machine-learning models. It reaches the service providers listed below only for the purposes above: for example, a feedback message carries your email to our team on Telegram, and a payment dispute may share your email with PayPal. It is otherwise disclosed only when the law requires it.
• Data retention and deletion. It is kept while your Ornus account exists. To delete it, write to [email protected] from the same email address; we normally delete your account and its Google data within 30 days, and it leaves our backups as they roll over. Removing Ornus's access at myaccount.google.com/permissions stops future sign-ins but does not by itself delete your Ornus account.

Ornus's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

• Google and Apple, to sign you in.
• PayPal and NOWPayments, to process payments and refunds. If you dispute a payment, we may give PayPal your account email and the checkout and access records above as evidence.
• Our hosting provider, our email service and Cloudflare, which run our servers, send account emails, deliver the website and downloads, and protect the contact form from abuse.
• Telegram, which delivers feedback and contact messages to our team, and our alerts about the service, which can include a refund reason or a payment reference.
• Kit, for the waitlist emails.
• The people in a gift: the first names described above.
• Creators whose code you confirmed: counts and amounts only, as described above.
• Authorities, only when the law requires it.

These providers may process information in other countries than yours, including the United States and the European Union.

How long we keep it

• Sign-in codes and sign-in attempts: deleted after one day.
• Browser sessions, with their IP address: deleted seven days after they expire.
• Service timing records: deleted after 30 days.
• Security events: deleted after 180 days.
• Account emails we sent: deleted after 400 days.
• Usage statistics and access records: kept 18 months, and longer only while a payment dispute about your account is open.
• Feedback and contact messages: only as long as we need them to answer you and improve Ornus, and deleted on request.
• Encrypted backups: the newest 30 daily backups are kept.
• Your account, devices, gifts, Messages and subscription records: while your account exists. Checkout, payment and refund records may be kept longer when tax, accounting or legal claims require it.

Your choices and rights

You can sign out any device from your account page. You can ask us to access, correct, export or delete your information, or to stop a use you object to, by writing to [email protected]. We may ask you to confirm the account is yours, and we answer within 30 days. Deleting your account removes your account, devices and sign-in links; it does not touch anything on your Mac and does not by itself cancel a PayPal subscription. If the law requires us to keep some records, we tell you what remains and why. You can also complain to the data-protection authority where you live.

Security

Connections use HTTPS. Sign-in tokens and session identifiers are stored only as one-way hashes, admin access needs a second factor, and backups are encrypted.

Children

Ornus is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, write to us and we will delete it.

Changes

If we change this policy, we will update the date above, and for important changes we will tell you in the app or by email.