Orchard ("Orchard," "we," "us") is building a living map of how work actually works — starting with managed service providers (MSPs). This policy explains what information we collect from visitors to entertheorchard.ai and people who join our mailing list, how we use it, and the choices you have.
We are a small founding team in private preview. We collect the minimum we need to run the site, understand aggregate use, and send updates when you ask for them.
1. Information we collect
Information you give us. The site has one form, the "Stay in the loop" signup in the footer. It collects one thing: your email address. That is the whole form. There is no field for your name, your company, your team size, or anything else, so we cannot collect them.
Information collected automatically. We use Google Analytics 4 to understand how people find and use the site. It collects usage information such as page views, sessions, referral and campaign information, approximate location, browser and device information, screen resolution, scrolling, outbound clicks, site-search activity, file downloads, video engagement, and form interactions. We do not send your name, email address, or other directly identifying information to Google Analytics.
Google Analytics uses first-party cookies, including _ga and a property-specific _ga_* cookie, to distinguish browsers and sessions. Google may use an IP address during collection for routing, security, and approximate location; Google states that raw IP addresses are not associated with user identifiers and are discarded after use.
Analytics information is not attached to your mailing-list submission in our systems.
Cloudflare serves this site, and like any web host it receives standard request metadata as part of routing traffic to you: your IP address, your user-agent string, and the path you requested. We do not store that data ourselves or connect it to your email address.
If the signup fails on our side, our server log records the error and may include the email address that was being submitted, so we can tell what broke. These logs are short-lived and are not used for anything else.
Local browser storage. The site uses localStorage to remember your colour-theme preference. Google Analytics sets first-party analytics cookies as described above. We do not use advertising cookies on this site.
2. How we use information
- To send you the product notes and occasional MSP playbook you signed up for
- To reply if you write to us
- To protect the signup form from abuse and to debug submission failures
- To understand aggregate site traffic and improve the website
- To comply with applicable law
We do not sell your personal information. We do not share it with advertisers. We do not use it to train third-party AI models.
3. Where your information lives
Your email address is sent to Resend, the platform we use to store our mailing list and send email. It is saved there as a contact and added to our website signups segment.
If Resend cannot be reached at that moment, the submission falls back to Web3Forms, which emails it to us so that your signup is not lost. Web3Forms sees your email address only when that fallback is used.
The site itself is served behind Cloudflare, which receives standard request metadata (IP address, user-agent, request path) as part of routing traffic.
Third parties we currently use:
- Resend — storage of your email address and delivery of our email
- Web3Forms — backup delivery of signups when Resend is unavailable
- Cloudflare — hosting and DNS
- Google Analytics — measurement of website traffic and interactions
- Google Fonts — web font delivery (Archivo, IBM Plex Mono, DM Sans)
4. How long we keep it
We keep your email address in Resend for as long as you remain on the mailing list, or until you unsubscribe or ask us to delete it. Server logs are short-lived. Google Analytics data is retained according to the retention controls configured for our Analytics property.
5. Your choices and rights
You can ask us to:
- Show you what we hold about you
- Correct anything that's wrong
- Delete your email address from our list
- Stop sending you updates
Every email we send also carries an unsubscribe link, which removes you without needing to write to us. Otherwise, email [email protected] from the address you signed up with and we'll handle it — usually within a few business days. Depending on where you live (EEA, UK, California, and others), you may have additional rights under GDPR, the UK GDPR, or the CCPA / CPRA, including the right to lodge a complaint with your local data protection authority.
6. Security
We take reasonable measures to protect the data we collect, including TLS in transit and access controls on the systems that store it. No method of transmission or storage is perfectly secure, so we can't promise absolute security — but we don't collect more than we need, which is the best protection we can offer.
7. Children
The site and our mailing list are intended for business users. We do not knowingly collect information from children under 16.
8. International transfers
We are based in the United States, and our service providers (Resend, Web3Forms, Cloudflare, Google Analytics, Google Fonts) operate globally. If you submit information from outside the United States, you understand that it may be processed in the United States and other countries where data protection laws may differ from those in your jurisdiction.
9. Changes to this policy
We'll update this page when our practices change. The "last updated" date at the top will always reflect the current version. Material changes will be communicated to people on our mailing list before they take effect.
10. Contact
Questions, requests, or anything else — email [email protected].