Last updated: September 5, 2026
Privacy Policy for Orixs and askOrixs.ai
This policy is written to clearly explain how Orixs handles user, workspace, Google, and AI copilot data across our website and SaaS applications.
1. Who We Are
Orixs and askOrixs.ai are operated by Trusphere Technologies Private Limited ("Orixs", "we", "our", or "us"). Orixs provides business operating platforms, workspace tools, and AI copilot features for teams using modules such as CRM, work management, finance, HR, payroll, recruitment, support, email, calendar, and reporting.
2. Scope Of This Policy
This Privacy Policy explains how we collect, use, store, share, and protect information when you use orixs.io, askOrixs.ai, our SaaS applications, our AI copilot, and connected integrations including Google Sign-In, Gmail, and Google Calendar.
3. Information We Collect
We collect information you provide directly, information created while using the platform, and information received from integrations you connect. This may include account profile details, business contact details, company and workspace data, CRM records, project records, forms, invoices, expenses, payments, attendance, leave, payroll-related records, recruitment records, tickets, notices, files, messages, calendar events, usage logs, device information, browser information, IP address, cookies, support messages, and billing or subscription information.
4. Google Sign-In Data
If you choose to sign in with Google, we may receive your Google account identifier, name, email address, profile image, and authentication tokens needed to securely sign you in. We use this information only to authenticate your account, prevent unauthorized access, and connect your Orixs workspace to the correct user profile. We do not receive or store your Google password.
5. Gmail And Calendar Data
If you separately connect Gmail or Google Calendar features, Orixs may access the Google data required for the features you enable. Gmail data may include email address, message metadata, message content, labels, threads, attachments, drafts, and sent messages where needed to show, search, summarize, draft, send, or sync mailbox activity. Calendar data may include calendar lists, event titles, attendees, dates, times, locations, descriptions, and meeting details where needed to show, create, update, or sync calendar events. These integrations are optional and can be disconnected by the user or workspace administrator.
6. How We Use Information
We use information to provide and secure the platform, create and manage user accounts, operate enabled modules, process user requests, sync connected integrations, provide AI copilot responses and actions, personalize workspace context, send service notices, provide support, detect abuse, maintain audit logs, improve reliability, process billing, comply with legal obligations, and enforce our terms.
7. AI Copilot Processing
When you use Orixs AI or askOrixs.ai, your prompt, workspace context, selected records, and relevant module data may be processed to answer your request or perform an action. The copilot can read, create, update, or delete records only according to your account permissions, company workspace boundaries, enabled modules, and confirmation rules. High-risk actions such as sending emails, deleting records, approvals, payroll, or other sensitive changes require confirmation before execution.
8. Google API Limited Use Disclosure
Orixs' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve user-facing features that you request or enable, such as Google Sign-In, mailbox sync, email drafting or sending, calendar sync, workspace search, summaries, and copilot actions. We do not sell Google user data. We do not use Google user data for advertising. We do not use Google Workspace API data to train or improve generalized AI or machine learning models. Human access to Google user data is limited to cases where you ask us for support, where access is required for security or abuse investigation, or where required by law.
9. How We Share Information
We may share information with service providers that help us operate the platform, including hosting, database, storage, analytics, payment, email delivery, customer support, security, and AI infrastructure providers. These providers are allowed to process information only as needed to provide services to Orixs and must protect it under appropriate confidentiality and security obligations. We may also share information when required by law, to protect rights and safety, during a business transfer, or when you direct us to share data through an integration or workspace action.
10. Data Storage And Retention
We retain account, workspace, and integration data for as long as needed to provide the services, comply with legal obligations, resolve disputes, maintain security, and enforce agreements. OAuth tokens for Google integrations are retained only while the integration remains connected or as otherwise needed for security and audit purposes. Audit logs may be retained to preserve security, compliance, and operational history. When data is no longer needed, we delete it or de-identify it according to our retention practices.
11. Your Choices And Controls
You may access, update, export, or request deletion of your personal information by using available account settings or contacting us. You can disconnect Google integrations inside Orixs where the feature is available, or revoke Orixs access from your Google Account permissions page. Workspace administrators may control user access, modules, permissions, and retention settings for their organization. You may opt out of marketing communications while still receiving important service or security messages.
12. Security
We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, or alteration. These safeguards may include HTTPS, access controls, tenant-level company scoping, role permissions, audit logs, token protection, secure deployment practices, monitoring, and restricted access to production systems. No method of transmission or storage is completely secure, but we work to protect your information in line with the sensitivity of the data we process.
13. International Transfers
Orixs may process and store information in countries other than the country where you are located. Where required, we use appropriate safeguards for international transfers and process information according to this Privacy Policy.
14. Children
Orixs is intended for business users and is not directed to children. We do not knowingly collect personal information from children under the age required by applicable law. If we learn that a child has provided personal information without appropriate consent, we will take steps to delete it.
15. Changes To This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the website, application, email, or another appropriate method. If a change affects how we use Google user data, we will request any required consent before using that data for a new purpose.
16. Contact Us
If you have questions about this Privacy Policy, Google data, account deletion, or your privacy choices, contact us at contact@askOrixs.ai.