Privacy Policy

Effective October 2026 · Questions: privacy@ortheos.ai

Ortheos is a legislative research service of Capital Projects, LLC, a private company. Ortheos is not a government service. It is not operated by, endorsed by or affiliated with any legislature, state government or public agency. The legislative information we show is public record.

This policy covers the Ortheos website and web app at ortheos.ai and the Ortheos apps for Android and iOS.

The short version

We never sell your data. We don't rent it, trade it or share it for anyone else's marketing.
No ads and no trackers. Ortheos has no advertising, no analytics service, no crash-reporting service and no session recording.
We don't use your content to train AI models, and we only use AI providers that don't either (section 4).
You can delete your chats, uploads and saved items whenever you like, and delete your whole account, in the app or on the web (section 7).
We tell you what kinds of companies handle your data on our behalf, and we keep a current list of them (section 5).

1. What We Collect

When you create an account

Your name and email address.
A phone number, optionally, if you choose to give one. It is kept for your account records and not used for messaging.
Your sign-in identity from our sign-in provider, including your Google account's name and email if you use Sign in with Google. We never see your Google password.
Your plan and your home state.
When you accept the Terms of Service: the version you accepted, the time, and the IP address and browser identifier at that moment, kept as the record of your acceptance.
If you are a legislator verifying your identity: we send a one-time code to your official legislative email address. The code expires after 15 minutes.

When you use Ortheos

AI chats: the messages you send to the Ortheos AI assistant and its answers, so your conversation history is there when you come back.
Files you upload: documents and photos you attach to a chat, or private versions of a bill you upload for analysis. We read the text from the file and keep the text, not the file itself.
Things you save: pinned bills, watchlists, saved reports, clients, notes and similar items.
Ratings and feedback: thumbs up or down on AI answers, and anything you send through the feedback form. If you report an AI answer, we keep the reported text with your report for 90 days to review it.
Usage counts: how much you have used features that have plan limits, such as AI requests, so we can apply your plan's limits and bill correctly. We don't record which pages you visit.

From your device

Push notifications (mobile apps): if you allow notifications, a notification token from your device, the platform and the app version. The token lets us send you the alerts you asked for, and it is removed when you sign out.
Bot protection: when you create an account, and as you use Ortheos, an automated check from our app security provider looks at signals from your browser or device (in the mobile apps, the phone's own app-integrity check) to confirm the request comes from our genuine website or app rather than an automated script. We receive only whether the check passed.
Ordinary connection information: like every website, our hosting provider receives your IP address and the requests your browser makes, and keeps short-term server logs for security and troubleshooting.
Browser storage: we store your sign-in session and a few display preferences in your browser or app. We don't use advertising cookies.

What we don't collect: your location, contacts, health information, audio recordings or payment card numbers. Our payment processor handles card details, and they never reach our servers.

2. How We Use It

To run Ortheos: sign you in, show the bills, members and hearings you look for, answer your AI questions, and keep your history and saved items.
To send the notifications you have agreed to (section 6).
To bill you and apply your plan's limits.
To keep the service secure: prevent abuse, verify legislators, and investigate problems.
To answer you when you contact us.
To comply with the law.

We don't use your information for advertising, and we don't build profiles of you for anyone else.

3. How AI Works With Your Information

Ortheos's AI features are powered by AI model providers. When you ask the AI assistant a question, your message and the information needed to answer it (for example the bill you are asking about, or the text of a file you attached) are sent to the model that handles that request. Photos and scanned documents you upload are sent to a model so their text can be read.

When the assistant needs to search the web to answer, it sends a search query to a web search provider. The query comes from your question. It is not tied to your name or account.

AI answers can be wrong. Check anything important against the official legislative record, which the assistant cites where it can.

4. AI Training

Ortheos does not use your content to train AI models, including our own: not your chats, the AI's answers to you, your uploads, your private bill versions or your saved items. That changes only if you explicitly agree first.
We only send your content to AI providers whose terms forbid training on it. We use their paid business services, which don't use customer content to train or improve their models. We never use free or consumer AI services for your content.
Files and photos you send to Ortheos's AI features are processed by AI model providers, which may include Anthropic (Claude), Google (Gemini), OpenAI (ChatGPT), xAI (Grok), and Ortheos-Argus AI Models. Your content is not used to train AI models.
AI providers keep what we send only for a limited time, mainly to detect abuse. It is usually deleted within 30 days, unless their safety systems flag it or the law requires them to keep it longer.
Web search queries are kept by the search provider for up to 90 days, for billing and troubleshooting, without identifiers that link a query to you.

If we ever want to change any of this, we will ask for your consent first and update this policy before anything changes.

5. The Companies That Handle Your Information

These companies process information on our behalf, to provide Ortheos. They are our service providers, and they are not permitted to use your information for their own purposes. We don't share your information with anyone else except as described in section 8.

AI model providers: Answer AI questions and read text from photos and scans. They receive your AI messages, the context needed to answer them, and the contents of files you upload.
Sign-in and app security: Sign-in (including Sign in with Google), app integrity checks and bot protection. They receive your sign-in identity and email, and device and browser signals.
Push notification delivery: Deliver alerts to your phone. They receive your device's notification token and the alert.
Payment processor: Payments and subscriptions. It receives your billing details and card, which you enter directly with it.
Email delivery: Sends our emails. It receives your email address and the message.
Cloud hosting and databases: Run our servers and store our data, including everything described in section 1.
Web search provider: Web search for the AI assistant. It receives the search query text only.
Video platforms: Play legislative hearing video. Only when you press play: the video loads from their servers, under their own privacy policies.

Every provider is bound by contract to use your information only to provide its service to Ortheos. We only work with a provider that meets this policy, and any AI provider has to meet section 4. Your information is stored and processed in the United States.

6. Notifications and Your Consent

We send email and push notifications only with your permission. We record your consent and the date you gave it. The notifications themselves are described in section 13 of our Terms of Service. You can turn email notifications off at any time under Account → Profile → Notification Preferences, and push notifications in your device settings. Turning them off doesn't affect your account.

7. Keeping and Deleting Your Information

You can delete things yourself, at any time: individual chats, uploaded files, private bill versions, pins, watchlist items, saved reports and clients, from the app.

Chats are deleted 90 days after you last open or use them, unless you archive them; archived chats are kept until you delete them or your account. This applies to bill chats too. Your Reports list keeps each entry until you remove it, for up to 18 months; a report that points into a chat goes when that chat does. Documents you attach to a chat are deleted with it.

You can delete your account in the app or on the web under Account → Profile → Delete account, or at ortheos.ai/account/delete, even without the app installed.

When you delete your account, your data is deleted immediately. The billing records we must keep for tax and disputes, and our security log entries, are kept with your name and email removed. Billing records stay linked to your payment details at Stripe. Server request logs keep your account id until they expire after 14 days.

Deleted: your profile, chats, uploads, private bill versions, saved items and reports, clients and their contacts, notification settings and history, usage counts, feedback, device notification tokens, and the record of your Terms acceptance.
A private bill version you uploaded is removed from your account. If another user uploaded the same document, their copy stays theirs.
If you belong to an organization's plan, your seat is released. Client records shared with your organization belong to the organization and stay with it. The organization's contract keeps its seat count, which contains nothing about you.
A legislator's public contact details from official sources, such as the official email address in the legislature's own directory, are public records rather than personal data we delete. They stay with that legislator's public record even if they match the email on the account you deleted.
Copies of deleted data can remain in our encrypted database backups until those backups expire, which takes up to 12 months. Backups are never restored into the live service.

Before you delete: deleting your account does not refund any payment. If your first payment to Ortheos was within the last 7 days, contact support@ortheos.ai first to ask for the refund our Terms of Service provide. Any unpaid invoices remain with Stripe.

How long we keep things while your account is open

Account details, uploads, saved items: Until you delete them or your account.
Chats, including bill chats: 90 days after you last open or use them, unless you archive them. Archived chats are kept until you delete them.
Documents attached to a chat: Deleted with the chat.
Generated report files: Kept up to 18 months.
Reports list entries: Until you remove them, for up to 18 months. One that points into a chat goes when that chat does.
Ratings and quality notes on an AI answer: While the chat exists. When you delete the chat, they are redacted and deleted 90 days later; when a chat is deleted because it went unused, they go with it.
Legislator verification codes: 15 minutes.
Push notification token: Until you sign out on that device, or the token stops working.
Feedback you send us: Until you delete your account.
A report of an AI answer, with the reported text: 90 days.
Usage counts: Until you delete your account.
Database backups: They expire in up to 12 months.
Server logs at our host: 14 days.

8. When We Disclose Information

We don't sell, rent or trade your information. We disclose it only:

to the service providers in section 5, to run Ortheos;
if the law requires it, for example a valid subpoena or court order. Where the law allows, we will tell you first;
to protect the safety, rights or property of our users, the public or Ortheos;
if Ortheos is merged, sold or reorganized, in which case this policy continues to apply to your information and we will tell you beforehand.

9. Information About People in the Public Record

Ortheos shows public-record information about legislators, such as votes, sponsorships, committee assignments, public statements and press releases. It also shows registered lobbyists and their filings, and testimony given in public legislative hearings, including the names of people who testified. This information comes from official public sources. It is not information our users give us. If you believe something we show about you is inaccurate or should not appear, write to privacy@ortheos.ai. We will check it against the official source and correct or remove what is wrong.

10. Security

All connections to Ortheos are encrypted, over HTTPS only. Our database encrypts stored data. Access to production data is limited to the people who need it to run the service. No service is perfectly secure. If a breach affects your information, we will notify you as the law requires.

11. Your Rights

Whatever state you live in, you can ask us to:

give you a copy of the personal information we hold about you;
correct it;
delete it, or do it yourself (section 7);
stop sending you notifications (section 6).

Email privacy@ortheos.ai from the address on your account. We will answer within 30 days, or sooner where the law requires. We won't treat you differently for using these rights.

12. Children

Ortheos is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone under 18. If we learn we have, we delete it.

13. Changes to This Policy

If we change this policy, we will update the effective date above. If a change is significant, for example a new kind of data or a new use of it, we will tell you by email or in the app before it takes effect. This policy is governed by the laws of the State of Georgia, as set out in section 14 of our Terms of Service.

14. Contact

Capital Projects, LLC, 126 Millstone Manor Ct., Woodstock, GA 30188 · privacy@ortheos.ai

Last updated: October 2026