~/orlix/privacy.md
$ cat privacy.md

Privacy Policy

effective 2026-06-01 · version 1.0

§1 The short version

Orlix is built on a single principle: your data is yours. The system is designed to be local-first — your world model, memory, and policies live on your device, not on our servers. We collect the minimum necessary to operate the product, and we never sell or share it.

data_location: "your device (local-first)"
sold_to_third_parties: false
ad_targeting: false
data_brokers: false

§2 What we collect

We distinguish between data that stays local and data that touches our servers:

  • Early access requests — email address and role you submit via the access form. Stored securely and used only to notify you when your cohort opens.
  • Usage telemetry (opt-in) — aggregate, anonymized signals about feature usage to help us prioritize development. Off by default. You choose when to enable it.
  • Error reports (opt-in) — crash diagnostics if you opt in. Stripped of personal content before transmission.

// your world model, memory, goals, policies, and receipts never leave your device unless you explicitly export them.

§3 What we do not collect

  • The content of your memory, goals, or policies
  • Action receipts or audit logs
  • Calendar, email, or task data that Orlix reads locally
  • AI model inputs or outputs processed on your device
  • Behavioral data for advertising or resale

§4 Local-first architecture

Orlix's core data layer runs entirely on your machine. When you run orlix memory --export, the file you get is the canonical source — there is no server-side copy. If you delete the local data, it is gone.

Where Orlix connects to external AI models (e.g. to process a task), it sends only what is required for that task, governed by the policy you configure. You control which models are permitted to receive which categories of data.

§5 Data retention

  • Early access emails — retained until you request removal or the product launches publicly, whichever comes first.
  • Opt-in telemetry — retained for 90 days in aggregated form, then deleted.
  • Local data — under your complete control. We have no retention policy over data we cannot see.

§6 Third-party services

The Orlix website uses Google Fonts (Plus Jakarta Sans, JetBrains Mono) for typography. This causes your browser to make a request to Google's servers when loading the page. No other third-party analytics, tracking, or advertising scripts are loaded.

When you configure Orlix to use an external AI provider (e.g. Anthropic, OpenAI), your interactions with those models are governed by that provider's privacy policy, not ours.

§7 Your rights

  • Access — request a copy of any data we hold about you.
  • Deletion — request removal of your early access record at any time.
  • Correction — ask us to correct inaccurate data.
  • Portability — your local data is already portable by design.

To exercise any of these rights, contact us at privacy@orlixai.xyz.

§8 Changes to this policy

If we make material changes, we will update the version number and effective date above, and notify early access members via email. Continued use after the effective date constitutes acceptance.

// questions? privacy@orlixai.xyz