Draft Policy

Privacy Policy

This launch draft explains the intended privacy posture for Orton Technology products. Final legal review is required before public launch.

Information We Expect to Process

Agency account details, staff user details, travel record data entered by agency teams, uploaded document metadata, task activity, support requests, and public inquiry form submissions.

How Information Is Used

To operate the SaaS workspace, generate travel reminder tasks, support agency onboarding, respond to inquiries, secure accounts, improve reliability, and maintain audit history.

Customer Travel Data

Customer and itinerary information belongs to the agency using the platform. The MVP is designed for tenant isolation and role-based access within each agency workspace.

Service Providers

Production providers for hosting, authentication, database storage, email delivery, payments, analytics, and monitoring will be listed after final provider decisions are made.

Retention

Original uploaded ticket PDFs remain available in the agency workspace for 180 days, move to a restricted support and recovery archive during days 181-365, and are permanently deleted after day 365. This original-file lifecycle does not delete the extracted travel records, reminder tasks, notes, or customer engagement information created from those documents.

Contact

Privacy questions should be routed through the contact page until the production privacy inbox is configured with the business domain.