/ Privacy
Privacy policy.
Orchard ("Orchard," "we," "us") is building a living map of how work actually works — starting with managed service providers (MSPs). This policy explains what information we collect from visitors to entertheorchard.ai and people who join our mailing list, how we use it, and the choices you have.
We are a small founding team in private preview. We collect the minimum we need, which on this site is one thing: your email address, and only if you type it in.
01Information we collect
Information you give us
The site has one form, the "Stay in the loop" signup in the footer. It collects one thing:
- Your email address
That is the whole form. There is no field for your name, your company, your team size, or anything else, so we cannot collect them.
Information collected automatically
Nothing is attached to your submission. We do not add a submission ID, the page or referring URL, your timezone or language, your screen or viewport size, your user-agent, session or scroll behaviour, or UTM campaign parameters.
Cloudflare serves this site, and like any web host it receives standard request metadata as part of routing traffic to you: your IP address, your user-agent string, and the path you requested. We do not store that data ourselves or connect it to your email address.
If the signup fails on our side, our server log records the error and may include the email address that was being submitted, so we can tell what broke. These logs are short-lived and are not used for anything else.
The main site carries no analytics. One internal page, not linked from anywhere and excluded from search engines, uses Cloudflare Web Analytics, which is cookieless and does not fingerprint or track individuals across sites. See cloudflare.com/web-analytics.
Local browser storage
We do not use localStorage, sessionStorage, or cookies of any kind on this site. No advertising cookies, no third-party tracking cookies, and no visit counters.
02How we use information
- To send you the product notes and occasional MSP playbook you signed up for
- To reply if you write to us
- To protect the signup form from abuse and to debug submission failures
- To comply with applicable law
We do not sell your personal information. We do not share it with advertisers. We do not use it to train third-party AI models.
03Where your information lives
Your email address is sent to Resend, the platform we use to store our mailing list and send email. It is saved there as a contact and added to our website signups segment.
If Resend cannot be reached at that moment, the submission falls back to Web3Forms, which emails it to us so that your signup is not lost. Web3Forms sees your email address only when that fallback is used.
The site itself is served behind Cloudflare, which receives standard request metadata (IP address, user-agent, request path) as part of routing traffic.
Third parties we currently use:
- Resend — storage of your email address and delivery of our email
- Web3Forms — backup delivery of signups when Resend is unavailable
- Cloudflare — hosting, DNS, and cookieless analytics on one internal page
- Google Fonts — web font delivery (Archivo, IBM Plex Mono, DM Sans)
04How long we keep it
We keep your email address in Resend for as long as you remain on the mailing list, or until you unsubscribe or ask us to delete it. Server logs are short-lived. Aggregate analytics are retained according to Cloudflare's defaults and contain no identifying personal data.
05Your choices and rights
You can ask us to:
- Show you what we hold about you
- Correct anything that's wrong
- Delete your email address from our list
- Stop sending you updates
Every email we send also carries an unsubscribe link, which removes you without needing to write to us. Otherwise, email [email protected] from the address you signed up with and we'll handle it — usually within a few business days. Depending on where you live (EEA, UK, California, and others), you may have additional rights under GDPR, the UK GDPR, or the CCPA / CPRA, including the right to lodge a complaint with your local data protection authority.
06Security
We take reasonable measures to protect the data we collect, including TLS in transit and access controls on the systems that store it. No method of transmission or storage is perfectly secure, so we can't promise absolute security — but we don't collect more than we need, which is the best protection we can offer.
07Children
The site and our mailing list are intended for business users. We do not knowingly collect information from children under 16.
08International transfers
We are based in the United States, and our service providers (Resend, Web3Forms, Cloudflare, Google Fonts) operate globally. If you submit information from outside the United States, you understand that it may be processed in the United States and other countries where data protection laws may differ from those in your jurisdiction.
09Changes to this policy
We'll update this page when our practices change. The "last updated" date at the top will always reflect the current version. Material changes will be communicated to people on our mailing list before they take effect.
10Contact
Questions, requests, or anything else — email [email protected].