Effective date: August 7, 2026 · Last updated: August 7, 2026
This Privacy Policy describes how Orchard Careers Inc (“Orchard,” “we,” “us,” or “our“) collects, uses, discloses, protects, retains, and deletes personal information when you use the Orchard platform and website (the “Services“).
It applies to individuals who use Orchard directly — students and young people using a personal account, parents and guardians, educators using a self-service individual account, and visitors to orchard.careers.
If you access Orchard through a school or district, a different policy applies. Where a school, district, or other educational institution (“School“) provisions or authorizes your account, the Orchard Privacy Policy for Schools and Districts governs instead of this Policy, and the School — not Orchard — controls that data. If there is a conflict between the two, the School Privacy Policy prevails for School-provisioned users and student data.
Individual educator accounts. A teacher, counselor, or administrator who signs up through a self-service account holds it for individual personal use only. Self-service accounts cannot create student accounts and are not granted access to organization-level functionality. Those accounts are governed by this Policy.
If you purchase a subscription, payment is processed by Stripe. Orchard does not collect or store your full payment card number or security code. See Stripe’s privacy notice.
We do not:
We use personal information to:
The Services include Orchie, an AI career companion, and AI-assisted search and recommendations.
Model providers. Anthropic is Orchard’s sole AI model provider. Voyage AI provides the text embeddings that power search and retrieval. Both are accessed under commercial API agreements.
No third-party model training. The commercial terms under which we access these providers prohibit the use of customer inputs or outputs to train their models. Your prompts, responses, assessment answers, and action plan content are not used to train Anthropic’s or Voyage AI’s foundation models.
Scope. Orchie is constrained to career readiness topics. Out-of-scope or inappropriate prompts are automatically detected and redirected. The experience does not include open internet browsing or image generation.
Human oversight. AI-generated career information is informational and is not a substitute for advice from a school counselor or other qualified professional. AI outputs may be inaccurate or incomplete. We do not make automated decisions that produce legal or similarly significant effects about you.
Orchard may, in the future, offer features that let you discover and engage with programs from third-party partners — for example extracurricular programs, summer camps, training providers, and post-secondary education options. Partners may pay Orchard in connection with being featured.
This functionality is not currently offered. No partner or sponsored content appears in the Services as of the effective date of this Policy. This section describes how we will handle it when it launches, so that our commitments are on the record in advance.
When we do offer it:
Users under 18. We have not yet determined whether partner content will be shown to users under 18. If we extend it to minors, we will do so consistent with applicable law, including restrictions on advertising to children, and we will describe the treatment in this Policy before launch.
School users are excluded. Partner and sponsored content will not be shown to students accessing Orchard through a School, and School student data will never be used for it. See the Privacy Policy for Schools and Districts.
We share personal information with a limited set of vendors who process it on our behalf, under written contracts requiring confidentiality, security, and use restricted to providing services to Orchard.
| Service provider | Purpose | Data location |
|---|---|---|
| Amazon Web Services (AWS) | Primary cloud hosting; compute and data storage | United States — us-east-2 (Ohio) |
| Vercel | Application hosting and delivery | United States |
| Google Cloud | Identity services | United States |
| Cloudflare | Content delivery network, DNS, and network security | United States |
| Anthropic | AI model provider for Orchie | United States |
| Voyage AI | Text embeddings for search and retrieval | United States |
| PostHog | Product analytics and error tracking | United States |
| Stripe | Payment processing | United States |
We may also disclose information: (a) with your consent or at your direction; (b) to comply with law, legal process, or a lawful government request; (c) to enforce our terms or protect the rights, safety, and security of Orchard, our users, or the public; and (d) in connection with a merger, acquisition, financing, or sale of assets, in which case the acquiring party will remain bound by the commitments in this Policy and you will be notified.
We do not sell your personal information. We have not sold or shared personal information for cross-context behavioral advertising in the preceding twelve months, and we do not do so today.
We may send you marketing emails about Orchard’s own features and offerings. You can opt out at any time using the unsubscribe link in any marketing email, or by writing to [email protected]. We will still send service and account messages necessary to operate your account.
We do not send marketing communications to users we know to be under 18.
We use cookies and similar technologies to keep you signed in, remember preferences, maintain security, and understand how the Services are used. Analytics are provided by PostHog.
We do not currently use third-party advertising or remarketing tags in the Services.
Most browsers let you remove or reject cookies. Disabling them may affect functionality. See our Cookie Notice for details.
Do Not Track and Global Privacy Control. There is no uniform standard for Do Not Track browser signals, and we do not currently respond to them. Where required by applicable state law, we honor Global Privacy Control (GPC) signals as opt-out requests.
The Services are intended for users 13 and older. We do not knowingly collect personal information from children under 13 through consumer accounts without verifiable parental consent. If we learn we have done so, we will delete it promptly.
If you are under 18, you should review this Policy with a parent or guardian, and you must have their permission to use the Services.
Parents and guardians who believe a child under 13 has created an account may write to [email protected], and we will delete the account and its information.
Students under 13 may use Orchard where a School has authorized it and provided consent on behalf of parents; that use is governed by the Privacy Policy for Schools and Districts.
Security. We maintain administrative, technical, and physical safeguards including TLS 1.2 or higher in transit, AES-256 encryption at rest, role-based access controls, least-privilege internal access, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Certifications. Orchard does not currently hold a SOC 2 attestation.
Data residency. All customer data at rest resides in the United States. AWS is our primary cloud provider, with all compute and data storage in us-east-2 (Ohio). Supporting infrastructure is likewise US-region.
Breach notification. If we confirm a security incident involving unauthorized access to your personal information, we will notify you without undue delay and consistent with applicable law.
Retention. We retain personal information only as long as necessary to provide the Services. Personal information is retained no longer than three (3) months past termination of your account, unless a longer period is required by law. Backup archives are encrypted and overwritten on a rolling basis; data deleted from active systems is not restored from backup.
Depending on where you live, you may have the right to:
How to exercise them. Write to [email protected], or use your account settings to review, update, or delete your information. We will verify your identity before acting and will respond within the time applicable law requires. You may authorize an agent to act on your behalf with proof of authorization.
Appeals. If we decline your request, you may appeal by writing to [email protected]. If we deny your appeal, you may complain to your state attorney general.
Residents of the EEA, UK, Switzerland, and Canada. The Services are directed to users in the United States and our data is stored there. If you use Orchard from outside the United States, you consent to the transfer and processing of your information in the United States. Where applicable law grants you additional rights — including access, rectification, erasure, restriction, portability, objection, and the right to complain to a supervisory authority — you may exercise them by writing to [email protected].
We may update this Policy. We will change the “Last updated” date above.
If we make a material change — including launching partner or sponsored content as described in Section 5, or any change that would permit a sale or sharing of personal information — we will provide notice at least thirty (30) days in advance by email or through the Services before the change takes effect, and where required by law we will obtain your consent.
Orchard Careers Inc
2000 Mallory Lane, Suite 290 #1442
Franklin, TN 37067
Privacy questions, requests, and complaints: [email protected]
Schools and districts should direct inquiries to their designated Orchard contact. See the Privacy Policy for Schools and Districts.