Privacy Policy

1. Information We Collect

Information you provide

• Account & profile: name, email address, organization name, role, and credentials, handled through our authentication provider.
• Customer Content: the data you submit to the Service, including org charts, seats, KPIs, scorecards, meetings, Rocks, issues, to-dos, Organizational Operating System ("OOS") files, and other content.
• Communications: messages you send us, support requests, and survey responses.
• Payment information: billing details, processed by our third-party payment provider; we do not store full card numbers.

Information collected automatically

• Usage data: pages viewed, features used, actions taken, and timestamps.
• Device & log data: IP address, browser type, device identifiers, and similar technical information.
• Cookies & similar technologies: used to keep you signed in, remember preferences, and understand usage. You can control cookies through your browser settings.

Information from third parties

If you connect a third-party integration (for example, email, calendar, or messaging tools), we receive information from those services as authorized by you.

2. How We Use Information

We use information to:

• provide, operate, maintain, and secure the Service;
• create accounts and authenticate users;
• generate AI-assisted summaries, suggestions, learnings, and other output;
• record, without identifying individuals, the decisions made in meetings, the results expected, and the results that followed, to improve the Service and to create de-identified data;
• create de-identified, aggregated data and use it to find patterns and benchmarks across organizations and to develop, improve, and train our own AI models and features (see Section 5);
• send service, transactional, and (where consented) marketing communications;
• process payments and manage subscriptions;
• analyze usage to improve and develop the Service;
• detect, prevent, and respond to fraud, abuse, and security issues; and
• comply with legal obligations and enforce our Terms.

3. Communications & Consent

By creating an account, you opt in to receive communications from OTP, including service and transactional messages and, where applicable, product updates and marketing messages, as described in our Terms of Service. Service-related messages are necessary to operate your account. You may opt out of marketing messages at any time using the unsubscribe link in those messages or by contacting support@orgtp.com; we will still send you service-related messages.

4. AI Features

The Service uses artificial intelligence to process Customer Content and generate output. Content may be processed by trusted third-party AI providers acting on our behalf under contractual confidentiality and security obligations. Our AI provider does not train its models on content we send it through its paid API. We do not sell your Customer Content. AI output may be inaccurate and should be reviewed before you rely on it.

5. Organizational Learning & Cross-Organization Intelligence

OTP learns what works, first for your organization and then across organizations. Here is how that uses your information:

• Organizational learning records: we record, at the organization level, the decisions made in meetings, the reasons given, expected results, and actual outcomes. These records do not identify individuals: names of people are removed and no record is linked to a person. They are not shown in the Service and are used to improve the Service and as a source of de-identified data.
• What other organizations see: nothing of yours unless you publish it. When you publish an OOS file or coordination learning, or otherwise make content public within the Service, that content may be visible to and used by other users as described in the Service.
• De-identified data: we may create de-identified, aggregated data from use of the Service across organizations, with names of people and organizations and other identifying details removed. We use it to find patterns and benchmarks, build evaluations, and develop, improve, and train our own AI models and features. We may also license de-identified data, and datasets, evaluations, and models built from it, to third parties, including AI developers, who may use it to train and evaluate their own AI models under written obligations not to re-identify it. We do not attempt to re-identify it, and nothing we show another organization identifies you or reproduces your content. De-identified data is not personal information.
• Never: we do not sell your Customer Content, and we do not give your content itself, as opposed to de-identified data, to a third party to train that third party's AI models without your separate written agreement.
• Opting out: an organization flagged Private (in Settings, Configuration, or by contacting support@orgtp.com) is excluded from every cross-organization surface and from de-identified learning, model training, and third-party licensing from the date it is set. Data already included in an aggregate or trained model before that date may remain there but is excluded from anything built afterward. Organizations on the Enterprise plan are excluded from de-identified learning, model training, and third-party licensing for as long as they are on that plan.

6. How We Share Information

We do not sell your personal information. We share information only:

• With service providers (such as hosting, authentication, payment processing, analytics, email delivery, and AI providers) who process data on our behalf under appropriate safeguards;
• Within your organization: other members of your organization may see Customer Content according to their roles and permissions;
• For published or public content as described in Section 5;
• De-identified data, which is not personal information, with third parties including AI developers, as described in Section 5;
• For legal reasons: to comply with law, respond to lawful requests, or protect the rights, safety, and property of OTP, our users, or others; and
• In a business transfer: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

7. Data Retention

We retain information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it. De-identified data may be kept and used as described in Section 5. You may request deletion of your account and associated personal information as described below.

8. Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights & Choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to opt out of certain processing (including de-identified learning and model training, by flagging your organization Private), and to withdraw consent. To exercise these rights, contact us at support@orgtp.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

U.S. state privacy rights

Residents of certain U.S. states may have additional rights regarding their personal information. We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined under applicable state law.

EU/UK users

Where the GDPR or UK GDPR applies, we process personal data on the legal bases of consent, performance of a contract, our legitimate interests, and compliance with legal obligations. You may have the right to lodge a complaint with your local supervisory authority.

10. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. International Data Transfers

OTP is based in the United States, and information may be processed and stored in the United States and other countries. Where required, we use appropriate safeguards for international transfers.

12. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

13. Contact Us

Questions about this Policy or your information? Contact OrgTP, LLC at support@orgtp.com.

OrgTP, LLC · New Jersey, USA · orgtp.com