Privacy Policy

Last updated: September 7, 2026

1. Introduction

Orgus is operated by Techmates International s.r.o. (IČO: 08530718, DIČ: CZ08530718), registered in the Commercial Register maintained by the Regional Court in Brno under file number C 114111/KSBR, with registered office at Čechyňská 547/5, 602 00 Brno, Czech Republic.

This Privacy Policy explains how we process personal data when administrators, organization members, interview participants, and report readers use Orgus.

2. Data We Process

Account and organization data may include names, email addresses, organization names, roles, invitations, authentication records, and account settings.

Discovery and interview data may include participant names and roles, interview messages, recordings or transcriptions when enabled, findings, corrections, organization context, process descriptions, and information about people, teams, tools, and working practices mentioned during interviews.

Generated and operational data may include process maps, analyses, reports, chat questions and responses, usage counters, access records, diagnostics, security events, and technical metadata such as timestamps and request identifiers.

3. How We Use Data

We process data to provide and administer Orgus; authenticate users and control access; conduct interviews and generate requested analyses; maintain report and reader access; enforce plan limits; secure, troubleshoot, and improve the Service; communicate essential service information; and comply with legal obligations.

Depending on the context, processing is based on performance of a contract, legitimate interests in operating and securing the Service, compliance with legal obligations, or consent where consent is required. An organization using Orgus may be the controller of interview and workplace data, while we process that data on its instructions.

4. Organization and Participant Responsibilities

Organizations are responsible for deciding what information is submitted to Orgus and for establishing a lawful basis for processing it. Organization administrators must provide required privacy notices and obtain any required consent before recording, transcribing, or analyzing interviews. Participants should contact the inviting organization first regarding its use of their interview data.

5. Service Providers and Data Sharing

We do not sell personal data. We use service providers to operate Orgus, including Microsoft Azure services for application hosting, database and file storage, and AI processing. Providers process data under contractual and security obligations and only as needed to deliver their services.

We may also disclose data when required by law, to protect rights or security, in connection with a corporate transaction, or at the direction of the relevant organization. Organization administrators and authorized readers can access data according to permissions configured in Orgus.

6. International Transfers

We seek to use European Union hosting and processing locations where configured and available. A provider may process limited support or service data from another country. Where required, we use appropriate safeguards for international transfers, such as adequacy decisions or standard contractual clauses.

7. Retention and Deletion

We retain account and customer content while needed to provide the Service, meet contractual requirements, resolve disputes, maintain security and audit records, and comply with law. Organization administrators may delete participants or discoveries through available controls. Some related records may remain temporarily in backups, security logs, or legally required records.

Account deletion and organization-wide deletion requests may be submitted using the contact information below. We may verify the request and the requester's authority before acting.

8. Cookies and Similar Technologies

Orgus uses cookies or comparable browser storage that are necessary for authentication, session security, language preferences, and core application operation. We do not use these technologies for third-party behavioral advertising unless this Policy and any required consent mechanism are updated first.

9. Security

We use measures designed to protect data, including encrypted network transport, password hashing, access controls, tenant-scoped authorization, and managed cloud infrastructure. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. Your Rights

Depending on applicable law, you may have rights to access, correct, erase, restrict, or receive your personal data, object to certain processing, withdraw consent, and lodge a complaint with a supervisory authority. These rights may be subject to legal exceptions.

If an organization invited you to an interview or shared a report with you, that organization may be the controller responsible for handling your request. We will assist the organization as required.

11. Children

Orgus is intended for organizational and professional use and is not directed to children. Do not submit children's personal data unless you have a valid legal basis and all required authorization.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in the Service, law, or our processing practices. Material changes will be communicated through the Service or another reasonable channel. The date above identifies the current version.

13. Contact Us

Questions or requests concerning privacy may be directed to:

Techmates International s.r.o.

Čechyňská 547/5

602 00 Brno, Czech Republic

IČO: 08530718 | DIČ: CZ08530718

Spisová značka: C 114111/KSBR Krajský soud v Brně