Privacy Policy

1. Scope

Oruk, Inc. ("Oruk", "we", "us", or "our") provides live broadcast intelligence, public story pages, developer APIs, account dashboards, billing flows, and related compute or inference services. This policy applies to websites and services we operate under oruk.ai and related Oruk-controlled endpoints.

Oruk's public news wire is built from live broadcasts, public web sources, social and structured feeds, and metadata from those sources. This policy covers the personal information we collect from our users and customers; it does not make Oruk the owner of third-party broadcasts, publications, or public records referenced by the product.

2. Information we collect

Account and contact data

When you create an account, log in, start a trial, contact us, or buy a plan, we may collect your email address, name, company, role, plan tier, authentication events, billing status, and support messages.

Usage and API data

We collect operational metadata such as IP address, user agent, request path, API key identifier, timestamps, quota usage, response status, latency, plan limits, and error traces. We use this to authenticate requests, enforce quotas, debug reliability issues, protect the service from abuse, and maintain billing records.

Prompts, completions, and compute requests

If you send data to an Oruk-operated inference endpoint, we process the submitted prompt, completion, parameters, and related metadata to provide the response. We may keep limited operational logs for abuse prevention, debugging, security, and billing reconciliation. We do not sell prompts or completions.

Payment data

Payments are processed by Stripe. Oruk receives billing metadata such as customer ID, subscription status, plan, invoice status, and limited card metadata. We do not store full card numbers.

Analytics and cookies

We use cookies or similar technologies for sessions, theme preferences, account security, analytics, and billing flows. Browser controls can block or delete some cookies, but core account and checkout features may require them.

3. How we use information

• Provide, secure, monitor, and improve the Oruk website, APIs, dashboards, streams, and inference endpoints.
• Authenticate users, issue API keys, enforce quotas, and prevent abuse or unauthorized access.
• Deliver verification codes, account notices, support responses, and operational alerts.
• Process subscriptions, invoices, tax and accounting records, refunds, chargebacks, and billing support.
• Measure site performance, diagnose errors, and understand aggregate product usage.
• Comply with law, enforce our terms, and protect Oruk, our customers, and the public.

4. AI, prompts, completions, and training policy

Inference requests may be processed transiently by Oruk infrastructure and by the model or infrastructure providers needed to deliver the response. We prefer metadata-only operational logging where possible. When content logging is necessary for debugging, abuse prevention, security, or billing reconciliation, we limit access to authorized personnel and retain it only as long as reasonably needed for those purposes.

5. How we share information

We do not sell personal information. We may share information with service providers that help us run Oruk, with payment processors, cloud infrastructure vendors, analytics providers, communication services, and security or fraud prevention vendors. We may also disclose information if required by law, to enforce our agreements, to protect rights and safety, or in connection with a financing, merger, acquisition, or sale of assets.

6. Retention

We keep account and billing records for as long as needed to provide the service, comply with legal obligations, resolve disputes, and maintain accounting records. API and security logs are retained for operational and security needs, then deleted or aggregated when no longer necessary.

Oruk's broadcast archive and transcript systems may retain public-source-derived content separately from user account data. The current archive service uses configurable retention, with a 90-day default for archive rows unless a different operational setting applies.

7. Service providers and subprocessors

Oruk uses third-party infrastructure and service providers to operate the product. Current providers may include Azure, Railway, Cloudflare, Stripe, Google Analytics, Azure Communication Services, RunPod, Hugging Face, Google Cloud, and model or inference providers used by our pipelines. The exact provider list may change as the service evolves.

8. Security

We use technical and organizational safeguards designed to protect account and operational data, including HTTPS, access controls, environment-based secret management, passwordless login codes, secure session cookies, API key controls, and monitoring. No internet service can be guaranteed perfectly secure.

9. Your choices and rights

You may request access, correction, export, or deletion of personal information by contacting us. Some data may need to be retained for security, billing, legal, or legitimate operational reasons. You can unsubscribe from non-essential communications where those options are provided.

10. Children

Oruk is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

11. Changes

We may update this policy from time to time. When we make material changes, we will update the date above and may provide additional notice through the site or account channels.

12. Contact

Questions or requests can be sent to nathan@oruk.ai.