Privacy Policy

Last updated: 12 October 2026

Orgnyz is a personal document assistant, currently in early, invitation-only testing. This policy explains what information Orgnyz handles, why, who else processes it, how long it is kept, and the choices you have. Orgnyz uses your information only to provide the features you use.

Information Orgnyz handles

• Your account. If you use the Orgnyz website: your name, email address and sign-in details, handled by our sign-in provider, Clerk (you can sign in with Google). If you joined Orgnyz on WhatsApp — invited by your family or introduced by someone you know — your account is your WhatsApp number and the name you were invited under; you don't need an email address or a password.
• Documents you provide. Files you upload, send to Orgnyz by WhatsApp, or ask Orgnyz to import from a service you have connected.
• Information read from your documents. For example a document's type, the people, companies and properties it concerns, dates such as issue and expiry, reference numbers, the issuing country, and how people and things relate to each other.
• What you tell Orgnyz. Your messages and voice notes (transcribed to text), your answers to its questions, things you tell it about your family, homes and companies, and the reminders you ask it to set.
• Connections. The access credentials for services you connect, stored encrypted.
• Operational records. Records of what Orgnyz did and when (for example, that a document was sent), kept for security and reliability. These records don't contain your messages.

Services you connect

Orgnyz connects to another service only when you choose to connect it, and you can disconnect at any time.

• Google Drive (read-only): to find and import the files and folders you choose.
• Gmail (read-only): to find documents in your email that you choose to import.
• Google Calendar: to add upcoming dates Orgnyz finds in your documents, such as an expiry or renewal date, as events in your calendar.
• Dropbox (read-only): to find and import the files and folders you choose.
• WhatsApp: to receive your messages and voice notes from a phone number you have verified, and to send you (or someone you ask it to) the documents you request. Messages are carried by Meta's WhatsApp Business Platform.

Google user data

Orgnyz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Orgnyz:

• uses Google data only to provide and improve the features you use (finding, reading, organizing and sending your documents, and adding upcoming dates to your calendar);
• does not sell Google data, use it for advertising, or use it to train general-purpose AI models;
• shares it only with the service providers listed below, and only as needed to provide those features;
• does not let people read it, unless you ask us to (for example for support), it is needed for security or to comply with the law, or it has been made anonymous.

Processing by AI and other providers

Some features rely on outside providers that process data on Orgnyz's behalf:

• OpenAI: reads document contents to recognize what a document is and what it says, and reads your messages to understand what you are asking for.
• ElevenLabs, with OpenAI as a backup: turns voice notes into text. The audio itself is not stored by Orgnyz.
• Render: runs the Orgnyz service and its database, in Frankfurt, Germany.
• Cloudflare: stores your documents (in its EU jurisdiction), protects the website, and provides the extra sign-in step used during testing.
• Meta (WhatsApp), Clerk (sign-in), Google and Dropbox (the services you connect).

Orgnyz asks before any AI reads your documents. You agree on the website (Settings) or on WhatsApp by replying YES when Orgnyz asks. Until then, documents you send are kept safely but not read, and Orgnyz doesn't read your email. To understand what you ask, Orgnyz always uses AI to read your messages themselves.

Turning reading off. You can turn reading off at any time: in Settings, or by sending “turn off reading” on WhatsApp. From then on, no AI reads your documents or your email: documents you send are kept safely, unread, and aren't read later unless you turn reading back on. What Orgnyz has already read from your documents — such as a document's type, names, dates and reference numbers — isn't deleted: it stays in your space so Orgnyz can still find and send your documents. When you ask a question, Orgnyz's AI may use that already-read information, together with your message, to answer. To remove it, delete the document permanently; that deletes the information read from it.

Orgnyz does not use your data to train its own models. These providers may keep data for a limited time under their own terms, for example for abuse monitoring.

Where your information is kept

The documents you give Orgnyz are stored in private storage operated by Orgnyz with Cloudflare, in its EU jurisdiction. The information Orgnyz reads from them, and the rest of your account, is kept in Orgnyz's database, run by Render in Frankfurt, Germany. Both are encrypted by the provider when stored. Credentials for the services you connect are additionally encrypted by Orgnyz (AES-256-GCM), and all connections are encrypted. During testing, the website also asks for a one-time code sent to your email before you sign in. No system is perfectly secure; if we learn of a breach affecting your information, we will tell you.

Who can see your information

Orgnyz works automatically. The person who runs Orgnyz can technically reach the systems that store your information, and uses that access only to keep the service running and secure. We don't look at your documents or messages in the normal course of running Orgnyz. If you ask for help that needs us to look at something, we ask your permission first and look only at what is needed. People you invite see only what you choose to share with them.

Your documents and who can see them.

• New documents you upload are saved in your private space by default, unless you explicitly choose to add them to a group. Other Orgnyz users can't see your private space — including the admins of any family group you belong to. (This is about other users. As explained above, the person who runs Orgnyz can technically reach the systems that store your information, and the service providers listed above process it to run Orgnyz.)
• Documents that are already in a family group stay there, with the same permissions as before: the people who could see them still can, and no one else.
• You can add a document from your private space to a family group you belong to. The group gets a copy; your original stays in your private space. In the group, its admins and the members whose access covers that kind of document can see it. You can take it back at any time, and a group admin can remove it; either way it is no longer available in the group in Orgnyz, and your original stays in your private space.
• A family group's admins decide what each member can see in the group. Access to a kind of document — for example “identity documents” — includes documents of that kind added later, until it is changed or removed. Documents a group shares with you are marked with where they come from.
• Members of a group can see each other's names (never phone numbers), and are told when someone joins or leaves.
• If someone introduced you to Orgnyz, they can't see anything of yours, and you can't see anything of theirs.

Sharing

Orgnyz does not sell your information and does not show advertising. Your information is shared only:

• with the providers above, to run the service;
• with people you choose: when you ask Orgnyz to send a document to someone, or give someone access;
• when required by law, or to protect the safety and security of people or of the service.

• Family invitations. To invite you, a family member picks the person in their own records — which may already hold your name and documents they keep about you — and enters your WhatsApp number. That record, including your number, stays in their space under their control whether or not you join; the invitation code stops working after 7 days. Joining doesn't give you access to that record, and leaving doesn't delete it.
• Within a family group. A member can ask Orgnyz to send a document they are allowed to receive to another current member of the same group — including a member who can't otherwise see that document in Orgnyz. Orgnyz first names the document and the recipient and asks for confirmation. The recipient gets a copy of that document only; it gives them no ongoing access in Orgnyz. Sending to anyone outside the group needs the group admin's permission.
• Documents added to a group. When a member adds a document, the group's admins are sent a copy on WhatsApp so they can keep it in the group or remove it.
• Taking access back. Removing someone's access, removing someone from a group, or taking a document back stops access through Orgnyz from then on. It can't recall copies already delivered through WhatsApp — Orgnyz can't stop a recipient from keeping or forwarding a copy they received.
• Introductions. When someone introduces you to Orgnyz, Orgnyz keeps the name and number they gave and a one-time code. These details are deleted when you join, or after 7 days if you don't. Orgnyz doesn't message you first; the person who introduced you forwards the invitation.

How long information is kept

• Your documents and the information read from them are kept while your account is active, or until you remove them.
• Removing a document in Orgnyz takes it out of your library. It stays in “Recently removed”, so it can be restored, until you delete it permanently there (or ask us to), which deletes the stored file and the information Orgnyz read from it.
• Database backups, used only to recover from a failure, are kept for up to 7 days; information you have deleted disappears from them within that time.
• Backup copies of your documents, also kept only to recover from a failure and also in Cloudflare's EU jurisdiction, are deleted within 30 days of you deleting a document permanently.
• The text of a conversation is kept for up to 30 minutes after your last message, to follow the conversation. Voice audio is not stored.
• An incoming WhatsApp message is kept only until Orgnyz has processed it, normally a few seconds. A document it carries is then kept like any other document.
• The details of an introduction (the name, number and code) are deleted when the person joins, or 7 days after the introduction if they don't.
• Operational records are kept for security and auditing.

Your choices

• Disconnect Google, Gmail, Calendar or Dropbox in Orgnyz at any time. You can also remove Orgnyz's access to Google at myaccount.google.com/permissions.
• Remove documents from your library at any time, and delete them permanently from “Recently removed”.
• Ask for a copy of your information, or for your account and data to be permanently deleted, by emailing us. We will respond within 30 days.

Children

Orgnyz accounts are for adults. Documents about children are added by the adult who manages them.

Changes

If this policy changes, we will update this page and its date, and tell you directly about any significant change.

Contact

Orgnyz: [email protected]