Product Privacy Policy
How Orcette Inc. handles information in the Disco Parrot desktop application and hosted platform.
Effective October 19, 2026
Version 1.0 · Orcette Inc. Existing signed customer agreements continue to apply.
Who operates the product
Orcette Inc. operates Disco Parrot and publishes its Windows application. This policy covers product accounts, the hosted platform, desktop features and related support. The marketing website has a separate Privacy Policy. If your organization provides your account, it controls your workspace membership and authorized uses of its content; contact its administrator about organization-managed data.
Account and workspace information
We process the identity information supplied by your sign-in provider, such as your name, email address and provider identifier; account and session records; organization membership, roles and permissions; and the projects, initiatives, plans, workflows, documents, comments and other content you provide. We use this information to authenticate you, apply access controls, deliver collaboration features and retain the work you choose to save.
AI conversations and agent actions
AI features process prompts, responses and the context supplied to the selected runtime, model or workflow. Context can include planning content, attachments, selected documents, repository material, tool results and workspace state. Agent actions can read or change authorized resources. Review the selected runtime, provider and permissions before starting work, and review AI output before relying on it. Conversations and execution records may be saved in the platform; ending a chat does not establish that its records have been deleted.
Repositories, local files and browser workspaces
Repository integrations and Local Files features operate on the resources you authorize or select. Authorized file content and tool results can be sent to hosted services or AI providers as task context. A local workspace does not imply that every operation or all data stays on your device. Browser sessions can process the pages, inputs, screenshots and interaction results needed for the requested task. Do not provide credentials or unrelated confidential material in a prompt or support report.
Integrations and credentials
We process integration settings, provider identifiers, credentials or secret references to connect the services you configure and execute authorized work. Access depends on your workspace permissions and integration configuration. Disconnecting an integration or revoking a provider token can stop future access, but does not by itself remove content already saved in conversations, workspace records, provider systems or backups.
Usage, diagnostics and support
We process service usage, entitlements, execution state, error and security records to operate the service, troubleshoot problems, apply plan limits and protect accounts. Support and policy reports can contain contact details, content references and the explanation you provide. Send only the information needed to investigate; we do not need your password, provider keys or complete private repository in an initial report.
Recipients and service providers
Information is available to authorized workspace participants and administrators according to their permissions. Infrastructure, identity, integration and AI providers process information needed for their configured services. Depending on configuration, these include Google Cloud, Microsoft services, GitHub, Cloudflare, OpenAI and Anthropic. Customer-provided provider accounts can have different terms and controls from managed provider access. Provider retention and training terms depend on the specific service and account agreement; do not assume that every available runtime has identical terms. We may also disclose information where required by applicable law or necessary to address security incidents and protect legal rights.
Retention and deletion
Retention depends on the data category, workspace settings, service function and applicable legal obligations. Saved planning content and conversations support continuing work; session credentials, temporary execution state, security records and backups have different lifecycles. Deleting an item or uninstalling the desktop application does not necessarily remove organization-held data, historical records, backups or copies processed by a connected provider. Contact us about account closure or deletion and your workspace administrator about organization-controlled content.
Your choices and requests
Choose which integrations and local workspaces to connect, review permissions, and use the account or workspace controls available to your role. You can contact privacy@discoparrot.com to request access, correction, export or deletion of your personal information, or to ask about applicable privacy rights. We may need to verify your identity and coordinate with the organization that controls the requested workspace data. Rights, exceptions and response requirements depend on applicable law.
Security and location
We use authentication, scoped access controls and protected connections to help safeguard information. No system can guarantee absolute security. Service providers may process information outside your state or country, subject to their service configuration and applicable agreements. The Store launch is offered in the United States; Store market availability is not a guarantee that every provider processes data in a single location.
Eligibility, updates and contact
Disco Parrot is intended for adults aged 18 or older. An ESRB content rating describes content suitability and does not establish contractual eligibility. We will identify changes with an updated policy version and effective date. Privacy questions: privacy@discoparrot.com. Security reports: security@discoparrot.com. Product and legal inquiries: legal@discoparrot.com.