Privacy Policy

Potentiacta is operated today by Jazters AI Lab LLC, a company in the United States that also runs Orchestra AI, the AI platform that powers the Potentiacta agent. Jazters AI Lab LLC is the controller of the personal data described here. When operation of the service passes to Potentiacta Public Benefit Corp., we will update this policy and tell signed-in users.

Questions and requests about your data: support@orchestra.ink.

• Account data. When you sign in with Google or Apple we receive your email address, your name, your profile picture if you have one, and the account identifier of that provider. You can change your display name and language in Settings.
• Your content. Messages you write, files you upload and the results the agent creates for you: documents, images, video, research reports, apps and other files, together with your chat history and Library.
• Usage and impact data. For every task we record which AI services were used, how much computing it took and what it cost, and from that we calculate its energy use, the carbon footprint of that computing, the spending it put into the economy (Input · Δf) and the output it added (Output · Δx). This is your impact passport. We also keep your credit balance and plan.
• Guest visits. If you use Potentiacta without signing in, we set a cookie with a random visitor identifier, keep the questions you ask the agent and record which steps of the introduction you open and where you came from. To limit abuse we keep a one-way fingerprint of your IP address, not the address itself.
• Identity verification. If you choose to verify your identity, see section 5 for exactly what we receive.
• Technical data. Our servers keep short-lived logs of requests and errors, such as time, request identifier and the browser's technical information, to keep the service secure and working.

• To provide the service: sign you in, run your tasks, keep your history, files and Library, and show your credits and impact passport. This is necessary to perform our agreement with you.
• To keep the service safe and fair: prevent abuse of the credits we provide, enforce limits and detect fraud. This is our legitimate interest and, for identity verification, your consent.
• To measure and improve the service: count usage, find errors and understand which parts of the introduction help. This is our legitimate interest; we use our own records, not third-party analytics or advertising tools.
• To produce aggregated impact data, as described in section 4. This is our legitimate interest and part of how access to Potentiacta is funded.
• To meet legal obligations, such as answering lawful requests from authorities.

We do not train AI models on your content. We do not sell your personal data and we do not show you advertising.

Access to Potentiacta is prepaid. To fund it, impact measured across all users is combined into packages of verified outcome units: sets of aggregated impact figures with their methodology and the evidence of how the figures are checked, which we offer to arrangers and issuers of social bonds. These packages contain totals and statistics, not your name, email, content or any data that identifies you, and they never contain data from identity verification. Users are not paid for this; the benefit to you is access to the service without paying for it.

Verification is optional. It confirms that you are a real person and moves your account to a plan with a larger monthly allowance. It is carried out by Stripe Identity, a service of Stripe, through the Stripe account of Orchestra AI, which is why the verification page shows the name Orchestra AI.

Stripe captures a photo of your government-issued ID and a selfie, checks that the document is genuine and that the selfie matches its photo, and asks for your consent before it processes biometric data. The document images, the selfie, your date of birth and your document number stay with Stripe. We receive the result and keep only: whether you are verified, your first and last name, your city, the type and issuing country of the document, and a one-way fingerprint of the document number. We use that fingerprint only to make sure one document verifies one account. We never see or keep the number itself.

Stripe processes verification data on our behalf and, for fraud prevention, as an independent controller under its own privacy policy. Verification is available from age 16 and is not available to people linked to jurisdictions where Stripe does not offer it. If you do not want biometric checks, write to us and we will look for another way to confirm your identity.

When you buy in Goods, we collect what we need to sell and deliver your order: your delivery address and phone number, which we store encrypted; your orders, payments, refunds and returns; and your Goods credits and how you earned and spent them. We use this to take payment, place the order with the supplier, deliver it, handle returns, send you order emails and prevent fraud. We do not see or store your card number; Stripe handles it. You must be 18 or older to buy in Goods. The Goods Terms of Sale and Returns Policy explain how buying works.

We share data only with service providers that process it for us under contract, and only as needed:

• Orchestra AI (Jazters AI Lab LLC), which runs the agent, stores your history and files and calls the AI services below.
• AI model providers that carry out your tasks through their business services: language models from xAI, Anthropic, Cerebras and Fireworks AI; image and video models through fal.ai; voice through ElevenLabs. They receive the content of the task they perform.
• Tavily for web search and reading web pages, and E2B for the secure sandboxes in which documents and apps are built.
• Fly.io and Tigris for hosting, databases and file storage; our application servers and databases are in Amsterdam, the Netherlands.
• Google and Apple for sign-in, and Stripe for identity verification.
• For Goods orders: Shopify, which records orders for our warehouse; Stripe, which processes payments; the dropshipping or print-on-demand supplier that ships your order, which receives your name, delivery address and phone number; and Resend, which sends order emails.

We may also disclose data when the law requires it, to protect the rights and safety of users, or as part of a transfer of the service to Potentiacta Public Benefit Corp. or another successor, who will be bound by this policy.

Our servers are in the European Union, and some providers listed above process data in the United States or other countries. Where data leaves the European Economic Area or the United Kingdom, we rely on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses.

• Account data, content, history and impact records: while your account exists. When you ask us to delete your account, we delete them within 30 days, except where the law requires us to keep something longer.
• Guest data, if you never sign in: deleted after 30 days. If you sign in from the same browser, your guest questions become part of your new account.
• Identity verification records: while your account exists, so that one document cannot verify several accounts. Stripe keeps its own copies under its policy, and we can ask Stripe to delete them on your request.
• Goods orders, payments and refunds: as long as tax and accounting law requires, usually 7 years. Delivery addresses: as long as we need them for your orders and returns; you can ask us to delete saved addresses at any time.
• Technical logs: a few weeks.

Depending on where you live, you may have the right to access your data, correct it, delete it, receive a copy in a portable format, object to or restrict its processing and withdraw consent at any time. Residents of California may also ask what personal information we collect and how we use it; we do not sell or share it for advertising. To use any of these rights, write to support@orchestra.ink. We answer within 30 days. If you are in the European Union or the United Kingdom, you can also complain to your data protection authority.

We use only the cookies and browser storage the service needs: a cookie that keeps you signed in, a cookie that remembers a guest visit, and small settings such as the open section, the chosen tool and the sidebar state. We do not use advertising or third-party tracking cookies. The Stripe page used for identity verification sets its own cookies under Stripe's policy.

Data travels over encrypted connections, access to production systems is limited to the people who run the service, and sensitive values such as API keys are kept outside the code. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

Potentiacta is not intended for anyone under 16, and we do not knowingly collect their data.

We will update this policy when our data practices change and change the date above. If the changes are significant, we will tell signed-in users before they take effect.

For any question about this policy or your data, write to support@orchestra.ink.