Privacy Policy

This policy explains how Jomiecode Foundry OPC (“we”) handles personal data in AI Orchestrator: the web console at ai-orchestrator.jomiecodefoundry.ph, its API, the worker software installed on your machines, the AI Orchestrator Browser Link extension and the AI Orchestrator mobile app (together, “the service”). We process personal data in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

Who uses the service

AI Orchestrator is a tool for organisations that run AI coding agents on their own machines. Accounts are created by an organisation’s administrator; there is no public sign-up. The service is not intended for children under 18.

What we collect

• Account data: your username, email address, display name and the organisation and access you were given. Sign-in is handled by Amazon Cognito.
• Machine data: for each machine your organisation enrols: host name, operating system, worker version, resource usage (CPU, memory, disk) and connection status.
• Work content: what your organisation’s sessions produce and send through the service: terminal input and output, messages between agents and people, projects, tasks, reports and files saved as artifacts, and comments.
• Browser Link: when you pair your browser and allow an agent to use it, the pages that agent opens and the commands it sends travel through the service to your browser. The extension acts only in the tabs it opened for that agent.
• Mobile app: a sign-in token stored in your phone’s secure storage, and a push notification token (Firebase Cloud Messaging) so we can tell you when a session needs you.
• Technical logs: request logs (time, address, user agent) and an audit trail of changes made in your organisation.

We do not use advertising identifiers, show ads, track you across other apps or sites, or sell personal data. We do not collect your location, contacts or payment information.

How we use it

• To run the service: sign you in, show and relay your sessions, deliver messages and notifications.
• To keep it secure: enforce each organisation’s access rules, keep organisations separate, and investigate abuse.
• To operate and improve it: troubleshoot problems and measure load.

AI providers and your machines

The AI agents run on machines your organisation controls, signed in to AI provider accounts your organisation chooses (for example Anthropic, OpenAI, Google or xAI). What those agents send to their providers is governed by your organisation’s agreements with them. The service does not send your work content to AI providers itself.

Who processes it

• Amazon Web Services (hosting, database, file storage, sign-in), in the Asia Pacific (Singapore) region.
• Google Firebase (push notifications and test-build distribution for the mobile app).

We share personal data with no one else, except where the law requires it.

How long we keep it

• Live terminal output is kept in the database for 14 days; archived session logs and artifacts are kept until your organisation deletes them or closes its account.
• Account data is kept while your account exists and removed when your organisation’s administrator removes you.
• Technical logs are kept only as long as needed to run and secure the service; the audit trail of changes is kept while your organisation uses the service.

Security

Data is encrypted in transit (HTTPS/WSS) and stored on Amazon Web Services infrastructure with restricted access. Every organisation’s data is kept separate, and access within an organisation follows the roles its administrators assign.

Your rights

You may ask to access, correct or delete your personal data, or object to its processing. Ask your organisation’s administrator, who can change or remove your account in the console, or write to us at jorge@jomiecodefoundry.ph. You may also complain to the Philippine National Privacy Commission.

Changes

We will post any change here and update the date above. Material changes will be announced in the console.

Contact

Jomiecode Foundry OPC, Philippines · jorge@jomiecodefoundry.ph