Privacy Policy

"User Content" means any text, draft, proposal, manuscript, dataset, attachment, prompt, instruction, or other material that you submit to, upload to, generate within, or store on the Services, including without limitation grant applications, specific aims, budgetary materials, and unpublished research findings.

"Account Data" means information you provide in the course of registration and account administration, including your name, institutional affiliation, and email address.

"Anonymized Data" means information derived from your use of the Services that has been subjected to irreversible de-identification such that it no longer identifies, and cannot reasonably be used to identify, re-identify, describe, or be linked to, you, your institution, or any natural person, whether directly or indirectly, alone or in combination with other information reasonably available to us.

You retain all right, title, and interest in and to your User Content, including all intellectual property rights therein. Nothing in this Policy or in your use of the Services operates as an assignment, transfer, or license of ownership of your User Content to Orris, except as expressly and narrowly set forth in Section 3.

Except as described in Section 5, Orris processes User Content for the purpose of providing the Services to you and for no other purpose. Specifically, Orris uses User Content only to: (a) generate, transmit, and display outputs you have requested; (b) persist your work so that it remains available to you across sessions; (c) perform functions you expressly initiate; and (d) comply with applicable law.

For the avoidance of doubt, and notwithstanding any other provision of this Policy, Orris does not: (i) sell, rent, lease, license, or otherwise commercially transfer your User Content or Account Data to any third party; (ii) use your User Content for advertising, profiling, or behavioral targeting; or (iii) disclose your User Content to any other user, institution, or researcher absent your explicit, affirmative, and revocable instruction. For the use of data generated through your use of the Services to improve Orris models, see Section 5.

You acknowledge and agree that Orris may generate, retain, and process Anonymized Data for the limited and legitimate purposes of maintaining, securing, evaluating, and improving the Services, including the measurement of aggregate feature utilization, latency and error diagnostics, quality assurance, and the statistical evaluation of output performance.

Anonymized Data is limited to aggregate and non-substantive signals, such as counts of actions performed, categories of tools invoked, timing and duration of operations, and coarse technical telemetry. Anonymized Data expressly excludes the substantive text or content of any User Content, any personal identifier, any institutional identifier, and any information sufficient to reconstruct, infer, or approximate the subject matter of your research.

Orris shall not attempt, nor authorize any third party to attempt, to re-identify Anonymized Data or to link Anonymized Data to any identifiable individual or institution. Anonymized Data, once de-identified, is not subject to deletion on an individual basis because it no longer relates to an identifiable person; this limitation is inherent to the nature of irreversible anonymization and does not diminish any other right afforded to you under this Policy or applicable law.

Orris trains and refines its models on data generated through your use of the Services. This includes Feedback Signals, meaning the evaluative records created when you assess an output, such as ratings you submit, whether a suggested revision was accepted, rejected, or modified, and corrective feedback you provide, together with the input and output text associated with those signals. This training is performed to improve output accuracy, tone calibration, and review quality for all users of the Services.

All material used for training is de-identified before use and severed from your name, your account, and your institutional affiliation. Training is performed only on models operated by or for Orris, and such material is never provided to a third party for the training of that party's own models.

You may object to this use by submitting a request through the support channels made available within the Services, in which case Orris will exclude your material from model training. Objecting does not affect your access to any feature of the Services.

Orris treats User Content as confidential information. All User Content is encrypted in transit using industry-standard transport encryption and encrypted at rest in Orris storage systems, and Orris maintains administrative, technical, and physical safeguards designed to protect it against unauthorized access, disclosure, alteration, and destruction. Access to User Content by Orris personnel is restricted to circumstances in which such access is strictly necessary to resolve a technical fault, prevent imminent harm, or comply with a binding legal obligation, and is subject to internal authorization and logging controls.

Where Orris engages third-party service providers to process User Content on our behalf for the purpose of delivering the Services, such providers act solely as processors under written agreements that prohibit the use of User Content for their own purposes, including model training, and that impose confidentiality and security obligations no less protective than those set forth in this Policy.

Orris retains User Content for so long as your account remains active or as necessary to provide the Services. You may delete User Content at any time through the Services. Upon deletion of your account, Orris will delete or irreversibly de-identify your User Content and Account Data within a commercially reasonable period, except where retention is required by applicable law or is necessary to resolve a pending dispute.

Subject to applicable law, you may request access to, correction of, portability of, or deletion of your Account Data and User Content, and may withdraw any consent previously granted. Requests may be submitted through the Services, and Orris will respond within the timeframes prescribed by applicable law.

Orris may amend this Policy from time to time. Where an amendment materially expands the categories of information collected or the purposes for which information is processed, Orris will provide notice prior to the amendment taking effect. Your continued use of the Services following the effective date of an amendment constitutes acceptance thereof.

Questions regarding this Policy, or requests to exercise the rights described in Section 9, may be directed to the Orris privacy contact through the support channels made available within the Services.