orbench Privacy Policy
This policy covers the orbench desktop application and the orbench.com
website. It explains what data we collect, where it goes, how long we keep
it, and the rights you have over it.
The short version
orbench is self-hosted by design. The app runs on your machine and stores your prompts, datasets, benchmark runs, results, and logs locally. We never receive them. The personal data we process is limited to what is needed to sell and license the software and to run the website: your email address, license status, and ordinary web/analytics data on the site.
1. Who we are
orbench is operated by Amandine Flachs, based in the United Kingdom. For the purposes of EU/UK data protection law, Amandine Flachs is the data controller for the personal data described in this policy. Contact: hello@orbench.com.
2. What the app sends, and to whom
| Recipient | What | When | Why |
|---|---|---|---|
| Model providers you connect to (for example OpenRouter) | Your prompts and dataset rows, with your own API key | When you run a benchmark or prompt | That is the product: calling the models you chose. Governed by that provider's terms and privacy policy. |
| Keygen (licensing provider) | Your email address, password (to Keygen only), license status, machine activation data | Sign-in and periodic license checks | To verify your license. |
| Our website/server | A standard web request with the app version | At launch, to check for updates | To tell you a new version exists. No account data is included. |
| Us (email, you initiate) | Whatever you include in a bug report email, such as the app's own log file (app.log, stored on your machine) | When you contact support | Bug reports you choose to send. app.log never contains prompts, benchmark data, or your API key. |
3. What the website collects
| Recipient | What | When | Why |
|---|---|---|---|
| Airtable | Your email address, plus a source label ("lead magnet" or "beta access") | When you submit an email-capture form on the site | To send you the starter kit or reply about access. |
| Polar (merchant of record) | Checkout and payment details | When you buy a license | Polar processes payment and handles sales tax/VAT. We receive your email and order status, never your card details. |
| Google Analytics | Page views and clicks, with IP anonymization enabled | Only after you accept analytics cookies | To understand which pages help visitors. Declining keeps the site fully usable. |
| Our hosting provider (OVH) | Standard web server logs (IP address, request time, page requested) | On every request to the site or update feed | Handled by the host for operations and security; we do not use them for tracking. |
5. Legal bases (EU/UK)
Where GDPR applies, we process personal data on these bases:
- Contract performance: your email, license record, and purchase status, needed to deliver and activate the software you bought.
- Consent: analytics cookies and any marketing email you sign up for through site forms. You can withdraw consent at any time (cookie preferences are reachable from the footer; unsubscribe links or a reply opt out of emails).
- Legitimate interest: security and operational logs kept by our hosting provider.
6. Where data is stored and how long
- On your machine: everything the product creates (benchmarks, logs, settings, your provider API keys, a cached license file) in
%LOCALAPPDATA%\orbench. Uninstalling keeps this folder; deleting it removes the data. - With our licensing provider (Keygen): your email address and license records, for as long as your license is valid plus legal record-keeping requirements.
- With Airtable: email addresses submitted through site forms, until you ask us to remove them or the list is no longer needed.
- With Polar: purchase records, retained as required for tax and accounting.
- With our hosting provider (OVH, EU): standard server logs, retained under the host's own retention policy. We do not maintain our own separate logs.
Our processors may store data outside the EU/UK (for example in the US). Where they do, transfers rely on the processor's standard contractual clauses or equivalent safeguards.
7. Security
We limit what we collect to what is needed to sell and license the software. For the data we do hold, we use reputable processors, restrict access to what is needed, and use HTTPS everywhere. No method is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as required by law.
8. What we do not do
- We do not see your prompts, datasets, benchmark results, or the API keys you use for model providers.
- We do not run analytics or tracking inside the app.
- We do not sell your personal data or share it for third-party advertising.
- We do not send marketing email without a sign-up; purchase-related email (license delivery, receipts, critical updates) is transactional.
9. Your rights
If you are in the EU/UK you have rights to access, correct, delete, port, object to, and restrict processing of your personal data, which for us is essentially your email address, purchase record, and license history. Email hello@orbench.com and we will handle it. You can also complain to your local data protection authority.
Deleting your data: contact us and we delete your licensing and email records, subject to legal record-keeping requirements for purchases (for example, tax records held by Polar).
10. Children
orbench is not directed at children and we do not knowingly collect their data.
11. Changes
We will update this page when practices change and note the date at the top. A change that materially affects your data will be announced in the app's update notes.
12. Contact
Privacy questions or requests: hello@orbench.com.