Privacy Policy

Last updated: April 10, 2026

Privacy Policy

Orqestra processes the data required to provide team inboxes, automations, AI, broadcasts, analytics, and operational support for WhatsApp and Instagram.

Data we process

  • Account and organization information
  • Conversation data, media, and delivery metadata
  • Product usage, subscription, and audit log data

Why we process data

  • To operate Orqestra's core services
  • To improve reliability, security, and support
  • To enable relevant AI features and third-party integrations

Contact

For privacy questions, contact privacy@orqestra.id.

Cookies and similar technologies

We keep this short because there is not much to disclose: Orqestra's public website sets no advertising cookies and runs no third-party analytics or tracking pixels. Everything below is either required for the site to work or remembers a choice you made yourself.

What we store on your device

NameTypePurposeRetention
wa_user_session Cookie Keeps you signed in to the Orqestra workspace. Set only after you log in. Until the session expires or you sign out
orq_cookie_notice Cookie Remembers that you have seen this notice, so it is not shown again. 12 months
orqestra_teaser_* Session storage Remembers that you dismissed the chat prompt, for this browser tab only. Until you close the tab
orq_webchat_* Local storage Identifies a chat conversation you started, so replies reach the right thread when you return. Only set if you use the chat widget. Until you clear your browser storage

We also register a service worker so pages load faster on repeat visits. It caches page assets on your device and collects nothing.

Third parties that see your IP address

Loading any web page reveals your IP address to whoever serves its files. On our public pages that is:

  • Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — serves the typefaces the site is set in.
  • Sentry — receives a report when a page fails, so we can fix it. We have turned off the option that would attach your IP address, request headers and cookies to those reports; what is sent is the technical detail of the failure.
  • Customer logo hosting — some client logos on the homepage are served from the customers' own domains and content delivery networks.

None of these set cookies on our behalf or are used to profile you.

Why we do not ask for your consent

Under Article 20 of Law No. 27 of 2022 on Personal Data Protection (UU PDP), processing personal data requires a lawful basis — consent, or another legitimate ground such as performing a contract or a legitimate interest. Everything listed above falls under those other grounds: it is necessary to deliver the service you asked for, or to keep it secure and working.

If we ever add analytics, advertising or profiling technology, that is not true any more. We would then ask for your consent before it runs, with refusing made exactly as easy as accepting, and you would be able to change your mind at any time.

Controlling cookies yourself

Every browser lets you view, block and delete cookies and site storage, usually under Settings → Privacy. Blocking the session cookie will sign you out and prevent you from logging in; blocking the rest only means the site forgets your preferences.

Questions about this section: support@orqestra.id.