Product privacy principles

Privacy follows engineering authority.

This page describes the current Orintus product design principles. A jurisdiction-specific privacy notice will accompany commercial availability.

Account data is separate from project authority

Signing in establishes identity and entitlement. It does not automatically upload a Local Project or grant Cloud authority over local engineering data.

Credentials stay at their owning boundary

Browser sessions use server-managed cookies. Provider, database, connector and local execution credentials are not exposed to browser JavaScript.

Telemetry must remain bounded

Logs and operational telemetry must redact sessions, assertions, verification material, customer content and engineering secrets. Product analytics must not silently become a second project data authority.