Privacy notice
Draft policy notice - legal and privacy review required before publication or reliance.
This page describes repository-level processing categories. Actual processing depends on the deployed configuration, enabled providers and connectors, customer instructions, and the applicable signed data-processing terms.
Potential data categories
- Account and organization details supplied by authorized users.
- Workflow inputs, outputs, metadata, and approval records.
- Connector content selected by the customer and permitted by its grants.
- Operational, security, billing, and support records created by configured services.
Purpose and disclosure
Data may be processed to provide configured workflows, administer accounts, investigate support or security events, meet legal obligations, and operate enabled providers. A current subprocessor list and provider terms must be verified for the target deployment; names appearing in source code are not evidence that a provider is active.
Retention, location, and security
Retention periods, deletion behavior, backup handling, data location, cross-border transfers, and security measures depend on verified deployment settings, provider records, applicable law, and the signed agreement. This repository notice sets no fixed period, region, response target, or certification status.
Shopping network buyers
Buyers can shop the shops on the AgenticOrg shopping network through the AgenticOrg MCP server (https://mcp.agenticorg.ai/mcp, used from ChatGPT, Claude and other AI apps) and through the AgenticOrg shopping bot on Telegram. Neither needs an account. Each shop is the seller and takes payment on its own payment page; AgenticOrg never takes payment and never receives card details. The network terms are at network terms.
What the MCP server handles
- Each request carries what the AI app sends: search words, the shop chosen and, to buy, the items, the delivery address and any contact details the shop's checkout asks for.
- Searches go to the shops' public catalogs. Checkout details go to the chosen shop's checkout, which AgenticOrg runs for that shop and keeps in the shop's AgenticOrg account as the shop's order record.
- The server keeps no conversation and no buyer profile. It logs each request's method, result status and duration, not its content. It counts requests per IP address for one minute in memory to limit abuse. The hosting platform's own request logs also record the time, path, status, IP address and user agent of each request.
- The AI app's own provider handles the conversation under that provider's privacy terms.
What the Telegram shopping bot handles
- The bot answers private chats only. It stores the chat under a one-way hash (SHA-256) of the Telegram chat id, never the id itself.
- With that hash it keeps the shop the buyer chose and the last six exchanges (a message and its reply), so a conversation can continue. The stored chat expires seven days after the last message, earlier messages are no longer used after 30 minutes without a message, and /stop deletes the stored chat at once.
- To write a reply, the buyer's message, the recent turns and the catalog results are sent to the language model service the platform is configured with.
- Telegram update numbers are kept for 24 hours so that an update Telegram sends twice is answered once. Message counts per hashed chat are kept for an hour to limit abuse.
- Checkout details the buyer gives in the chat go to the chosen shop's checkout, as for the MCP server. Telegram handles the chat itself under Telegram's privacy terms.
Requests
Requests concerning access, correction, export, deletion, objection, or restriction are handled under applicable law and the controlling customer agreement. Identity and authority may need to be verified before a request is acted on.
Contact
Send privacy questions without credentials or unnecessary personal data to sanjeev@orchestrum.in.
AgenticOrg is owned by Orchestrum Technologies LLP.
Inventor / Owner: Sanjeev Kumar
Contact:sanjeev@orchestrum.inmishra.sanjeev@gmail.com
Licence: platform Orchestrum Personal Use 1.0. Only individuals' personal use is free; any organisation needs a signed agreement with Orchestrum Technologies LLP. SDKs and MCP server: Apache-2.0, free for any use. Licensing and commercial use