Privacy policy
Orchelix AI Consulting Inc. builds AI agents that answer phones, qualify leads, and book appointments for other businesses. This page explains what personal information we handle, why, who else touches it, and what you can ask us to do with it — in plain language.
Effective September 11, 2026· Canada & United States
- We never sell it
- Personal information is not sold, rented, or used for advertising
- Calls are recorded
- Esmi records and transcribes calls for the business you called
- You can ask
- For access, correction, or deletion — privacy@orchelix.com
- Two countries
- Canadian company (Ontario), US operations (Florida)
Who we are
"Orchelix", "we", and "us" mean Orchelix AI Consulting Inc. We play two different roles, and which one applies depends on who you are.
- Visitors & prospects
- When you browse orchelix.com, book a pilot, or contact us, we decide what is collected and why. This policy governs that information.
- Our clients
- When a business signs up for Esmi or another agent, we hold its account details and the settings it configures. This policy and the client's agreement with us both apply.
- People who call our clients
- When you call or message a business that uses Esmi, we process the conversation on that business's behalf and under its instructions. That business is responsible for telling you how it uses your information; we help it honour your requests.
- Company
- Orchelix AI Consulting Inc. — incorporated in Ontario, Canada
- US operations
- West Palm Beach, Florida
- Privacy Officer
- Jorge Quiñonez — privacy@orchelix.com
What we collect, and why
Information you give us
- Forms
- Name, email, company, phone, the use case you pick, and your message — when you book a pilot or contact us. Used to reply, schedule, and prepare a proposal.
- Ad forms
- If you submit a lead form on Facebook or Instagram, Meta passes us the fields you entered so we can call you back.
- Client accounts
- Name, work email, business name, and team members, for the dashboard. Sign-in is handled by Clerk.
- Payment
- The pilot fee is paid through Stripe. Stripe receives your card details; we see only the confirmation, amount, and contact details.
- Business setup
- Hours, services, pricing ranges, FAQs, and calendar connections a client gives Esmi so it can answer for them.
Information collected as the service runs
- Calls
- Caller phone number, the recording, a transcript, the reason for the call, and the outcome — booked, routed, answered, or closed.
- Messages
- Text messages and web-chat conversations Esmi sends or receives for a client, including the demo chat on this site.
- Appointments
- The name, time, and details needed to place a booking on the client's calendar.
- Site analytics
- Pages viewed, referring site, device and browser type, and country — through Vercel Analytics, which sets no cookies and does not follow you to other sites.
- Security logs
- IP address and request details our hosting keeps briefly to run and protect the service.
- Notifications
- If a client turns on dashboard alerts, a browser push subscription so we can deliver them.
We use this information to run the service a client has asked for, answer and follow up on inquiries, schedule and bill, secure our systems, fix problems, and meet legal obligations. We do not ask for health information, government ID numbers, or card numbers, and we ask clients not to configure Esmi to collect them.
Calls, recording & AI
Esmi is an AI assistant, not a person. It answers in English or Spanish (French where a client adds it), and every conversation is written down so the business can review what happened.
- Disclosure
- Esmi can open each call by saying it is an AI assistant and that the call is recorded. The client chooses the greeting and is responsible for giving the notice its location requires — some places, including Florida, require the consent of everyone on the call.
- Language models
- To understand callers and reply, conversation text is processed by AI model providers under contract with us. They process it to produce a response; we do not permit it to be sold or used for advertising.
- Human control
- The client can review, correct, override, or delete any record, and can transfer a caller to a person.
- Retention
- Recordings and transcripts are kept for the period the client configures, then deleted. See Retention below for defaults.
PIPEDA & where data lives
For people in Canada we follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy law where it applies. In the United States we follow the federal and state laws that apply to us.
- Accountability
- A named Privacy Officer answers for this policy
- Consent
- We rely on your express or implied consent, which you may withdraw, subject to legal and contractual limits
- Limited purpose
- We collect only what the service needs, for the purposes stated here
- Cross-border
- Most of our providers store and process data in the United States, so information about Canadians may be accessible to US authorities under US law. Canadian data residency is available to clients on request.
- Complaints
- You may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca
Security & retention
How we protect it
- In transit
- Encrypted with TLS
- Access
- Role-based, with each client's data isolated to its own organization
- Secrets
- Platform keys stay on the server and never reach the browser
- Review
- Production systems are reviewed regularly
- Incidents
- If a breach puts you at real risk of significant harm, we will notify you and the regulators the law requires
No system is perfectly secure, and we do not claim third-party certifications we have not completed. Clients can ask for our current controls during a pilot.
How long we keep it
- Calls & texts
- For the period the client sets, then deleted
- Web chat
- 90 days by default
- Inquiries
- As long as the conversation is active, and up to two years after, unless you ask us to delete sooner
- Client accounts
- For the life of the account, then deleted or anonymized
- Contracts & billing
- Seven years, as Canadian tax and accounting rules require
Your rights & choices
- Access
- Ask what personal information we hold about you and how it has been used
- Correction
- Ask us to fix anything inaccurate or incomplete
- Deletion
- Ask us to delete it, where the law and our obligations allow
- Withdraw
- Withdraw consent to a use, or unsubscribe from any email
- Complain
- To us first, and to the Privacy Commissioner of Canada or your state regulator
Email privacy@orchelix.com. We will confirm who you are, then answer within 30 days. If you called one of our clients, you can ask that business directly or ask us — we will pass your request to the business and help it respond.
- Cookies
- The public site sets no advertising or tracking cookies. The dashboard uses the essential cookies Clerk needs to keep you signed in.
- Children
- Our services are for businesses. We do not knowingly collect information from children under 16; if we learn we have, we delete it.
- Changes
- When this policy changes, we update the date at the top. If a change is material, we tell clients by email before it takes effect.
Contact the Privacy Officer
- Privacy Officer
- Jorge Quiñonez
- privacy@orchelix.com
- Phone
- +1 561 566 1066
- Canada
- Orchelix AI Consulting Inc., Ontario
- United States
- West Palm Beach, Florida