Website privacy · Updated November 3, 2026

Privacy, plainly.

Orneos is currently operated by Filip Ilievski. For privacy questions, contact support@orneos.com.

The early-access request form is not open yet. The form is disabled and does not send your details. You can contact us by email.

Early-access enquiries

When early-access requests open, the form collects your name, email, role, and any optional team size and description you choose to provide. We use this information to respond to your request and discuss whether early access is a good fit. Submitting a request does not subscribe you to a marketing mailing list.

Please leave out private code, credentials, and confidential material. Access to any material needed during early access is agreed separately.

Why we process it

We process an enquiry to respond and, where relevant, take steps toward early access at your request. Where data-protection law requires a legal basis, this is taking pre-contractual steps when you are the prospective customer, or our legitimate interest in responding to a business enquiry when you contact us for a team. Delivering and protecting the website also serves our legitimate interest in operating a reliable service. We do not treat an enquiry as consent to unrelated marketing.

Who handles the information

The founder handles early-access enquiries. Necessary infrastructure administrators may also have access to operate and protect the service. Orneos uses Railway for its application infrastructure. Email sent to our support address is handled through Google’s email service.

We do not sell enquiry details or use them for advertising. Service providers process information as needed to host the service and deliver email. Contact us if you need details about these arrangements before sharing information.

How long we keep it

Our policy is to retain initial early-access enquiries for 90 days. An enquiry is not a 90-day trial: if you join early access, we agree separately what information is needed for that relationship.

Our policy is to delete expired form records from the active enquiry database. Email correspondence is kept as needed to handle your enquiry; you can ask us to delete it. Deleted database records may remain in restricted backups until those backups expire.

Your choices

You can choose not to send a request, leave optional fields empty, ask to see or correct the information you supplied, or ask us to delete it or stop contacting you. Write to support@orneos.com. We may need to verify that a request concerns your information before acting.

Depending on the law that applies to your information, you may also have rights to restrict or object to processing, receive a portable copy, or complain to the relevant data-protection authority. We assess requests under the applicable rules; not every right applies to every record or purpose.

Website storage and technical information

Fonts are hosted with the website. This website includes no advertising or third-party analytics scripts; it counts page views itself, without cookies or identifiers, as described under “Counting website visits”. A theme preference may be saved in your browser’s local storage; the website still works when storage is blocked. The contact form does not save your contact details in browser storage. Briefing sign-in sends your username and password to our server for verification and sets a secure access cookie for up to 90 days. Passwords are not stored in that cookie; server credential configuration stores password hashes. Our cookies and storage notice lists what is stored and how to clear it. Google Search Console reports search performance without adding a visitor analytics script to these pages.

Hosting services process technical request information to deliver and protect the site. The enquiry deletion schedule does not automatically delete support emails, technical logs, or backup copies.

Counting website visits

When you open a page on about.orneos.com, your browser sends us that page's path (for example /product; a page that does not exist is recorded only as /404), the name of the website that linked you here if it is another public site (for example news.ycombinator.com), and any utm_source, utm_medium and utm_campaign tags in the link, stored as given when they are short codes. The count stores only that and the hour of the visit. It sets no cookie, contains no IP address or device or browser details, and carries no identifier that could recognize you on a later visit, so we can count page views but not visitors.

Separately, like every request to our services, the request that carries the count passes through our hosting provider, whose request logs record your IP address and browser details to deliver and protect the service. The stored counts are designed so they cannot be matched to those log entries.

We keep the counts ourselves for about 13 months (400 days). They are not sent to any analytics or advertising provider. Within Orneos only the founder can see them; our hosting and database providers process them on our behalf to run the service. We count visits because we have a legitimate interest in knowing which pages are useful and where visitors come from. Because the counts identify no one, we cannot find, export or delete the views of a particular person.

Counting does not run on docs.orneos.com or the protected briefing, or when your browser sends Global Privacy Control or Do Not Track. To stop it in one browser, open about.orneos.com/?count-me=no once. This saves a single “no” preference in that browser's local storage, which the page checks on each visit; /?count-me=yes removes it. If your browser blocks site storage, the preference cannot be saved; Global Privacy Control works instead.

The Orneos application and usage measurement

The Orneos application at orneos.com records first-party usage events, such as a session starting, a kind of screen being opened, or an issue being created or an Intent approved, so we can see whether the product is useful. These events never contain titles, descriptions, comments, questions, page addresses or email addresses, use no cookies or browser storage, and are not sent to any third-party analytics or advertising service. You can switch this off for yourself at any time in the application under Settings → Profile → Usage data, which also deletes what was already recorded for you.

The complete list of events, who can see them, how long they are kept and how to turn them off is in Privacy and your data.

AI in the Orneos application

Orneos AI features run on Anthropic’s Claude models through Anthropic’s commercial API. When you use one, for example to draft an Intent, the text needed for that request is sent to Anthropic, which processes it to produce the response. If you draft with your own Anthropic key, the request goes from your browser to your Anthropic account under that account’s terms.

For requests made under Orneos’s account, Anthropic’s published commercial terms say it does not use the inputs or outputs to train its models by default, and deletes them within 30 days, except where it must keep them longer to enforce its Usage Policy or to comply with the law. Orneos does not use Anthropic’s feedback features. Today, no Orneos feature sends your repository’s source code to a model; text you write, such as a task description or comment, is sent as written. The review assistant, when it reaches your team, will send only the diff excerpts a reviewer selects, and this notice will be updated before it is enabled. Restricted and private Vault pages are left out of AI requests. What each feature sends is listed in Privacy and your data.

Scope of this notice

This notice covers the public marketing website, its visit counting and initial enquiries; the section above also summarizes application usage measurement and links to its full description. It is not a promise that the product workspace or early access has identical data handling. Before you share project material during early access, we agree its access, purpose and retention separately.

Hosting and email providers, and Anthropic for AI features, may process information outside your country; Anthropic is based in the United States. Contact us before sharing material if you need confirmed processing locations or transfer arrangements. We do not promise that all processing stays in your jurisdiction.

Changes

We will update this notice if the operator or the way we handle enquiries changes, including when Orneos becomes a registered company.