Privacy Policy
Last updated 17 July 2026
OrionDesk is built privacy-first. The core tools run entirely inside your browser, so the files you work on never leave your device. This policy explains the little data we do handle, and how. OrionDesk is operated from Malaysia and aligns with the Personal Data Protection Act 2010 (PDPA).
The short version
- Your documents are processed on your device. For the PDF, image, converter and calculator tools, nothing you upload or generate is sent to us or stored on our servers.
- We don't sell your data, and we don't use third-party advertising or cross-site tracking cookies.
- You can use almost everything without an account.
Files you process with the tools
The core (non-AI) tools do all their work in your browser using local JavaScript. Your file is read into the browser tab, processed there, and the result is offered back to you as a download. It is never transmitted to OrionDesk. When you close or reload the tab, it is gone.
What we do collect
- Account details (optional): if you create an account, we store your username, email address and a securely hashed password. You only need an account for your workspace and favourites.
- Favourites: the tools you pin, linked to your account.
- Feedback: the message and optional star rating you submit through the feedback widget (this is text you choose to send us, not your documents).
- Aggregate usage counts: anonymous tallies such as “tool X was opened/run N times today”, with no file content and nothing that identifies you.
- Privacy-first analytics: aggregate page metrics collected without cookies and without cross-site tracking.
AI tools
The AI tools (Pro, launching later) are the exception to on-device processing: when you use one, the text you provide is sent to our AI service purely to generate your result, then returned to you. We do not store the content of your AI requests or their outputs — only aggregate counts and token totals for capacity planning.
Cookies
If you log in, we set a single essential, signed, HttpOnly session cookie so you stay signed in. That's it — no advertising or third-party tracking cookies.
Data retention & ephemeral cache
Because we don't store your documents, there is nothing to retain. If we later offer an optional convenience cache (e.g. remembering your last invoice details), it will be short-lived (auto-expiring within 24 hours), clearly opt-in, and never contain full documents. Account data is kept until you delete your account.
Your rights (PDPA)
- Access and correct the personal data in your account.
- Withdraw consent and delete your account and its data at any time.
- Ask us what personal data we hold about you.
To exercise any of these, email hello@oriondesk.space.
Changes to this policy
We may update this policy as the product grows (for example when subscriptions launch). We'll revise the “last updated” date above, and material changes will be highlighted in the app.