Privacy policy
Effective 13 October 2026
Who we are
Orizon is run by Boris Goranov and Lohithsai Yadalachanchu, 2261 Market Street, San Francisco, CA 94114, United States. We are the controller of the personal data described here. In this policy, "Orizon", "we" and "us" mean us.
For anything about your data, or to reach a person instead of the assistant, email privacy@orizon.fun.
This policy covers the Orizon assistant, its pages on go.orizon.fun, and the website orizon.fun.
How Orizon works
Orizon gives each person their own assistant on their own server. The server is yours, and it runs where you choose. It runs a web browser and the AI that drives it. You chat with the assistant on WhatsApp, iMessage or Telegram, and its answers are written by AI.
When you want Orizon to use one of your accounts, you sign in to it from your server. For most websites, Orizon sends you a sign-in page on go.orizon.fun. What you type there passes through Orizon's servers to yours, which enters it into the website's own sign-in form in the browser and does not keep it. Some services use their own screen instead: Google asks you to approve access, and WhatsApp links when you scan a code, as WhatsApp Web does.
From then on the assistant can see what you could see when signed in to that account, and it uses it to do what you ask.
Your messages with Orizon
On WhatsApp, you talk to Orizon through the WhatsApp Business Platform, which Meta runs. On iMessage, Apple carries the messages, and on Telegram, Telegram does. Orizon receives your phone number or account name, your profile name, and what you send: messages, voice notes, photos and location pins. It uses them only to answer you.
- Voice notes are turned into text on your server. The audio is never saved.
- Photos are passed to the AI with your message, and the file is deleted from the server right after. The AI's record of the conversation can still contain the photo.
- Location pins are used for questions about places near you and to set your time zone.
Your server keeps your conversations with Orizon, including what the assistant read to answer you. That is how it remembers earlier conversations.
Accounts you connect
You decide which accounts Orizon can use. It can use none of them until you sign in, and you can disconnect each one at any time. Depending on what you connect, the assistant can see:
- messages and chats, including status updates your contacts post;
- email;
- calendar events and bookings;
- contacts and the profiles of people you know;
- posts, connections and profiles on social and professional networks;
- activity and fitness records, including private activities, routes and heart rate;
- anything else that account shows you when you are signed in.
Orizon reads these accounts when a request needs them and does not make its own copy of them. Some chats only deliver new messages to a signed-in device and cannot be looked up later, so Orizon keeps recent messages for at most 7 days, and your contacts' names while that account is connected. Like any browser, the server's browser also keeps what websites store in it, such as your sign-ins.
What the assistant reads while answering you becomes part of your conversation record. Orizon never stores the passwords or codes you type to sign in to a website.
Sensitive information
Your accounts can hold sensitive information, such as health details in fitness records or in messages. Orizon reads it only when a request needs it, and only to answer you.
What we do not do
- No person at Orizon reads your accounts or your conversations. We look only if you ask us to, if it is needed to investigate a security incident or a problem you report, or if the law requires it.
- We do not analyse, mine or build profiles from your data. It is used only to answer you and do what you ask.
- We do not sell, rent or trade your data, and we do not use it for advertising.
- We do not use your data to train AI models.
- We do not make decisions about you by automated means that have legal or similarly significant effects.
The AI that answers you
Orizon's answers are written by OpenAI's Codex. When you start, you sign in with your own ChatGPT account. Your server keeps that sign-in until you delete your account, and you can also end it from your ChatGPT account's security settings.
To answer a message, Codex receives your message, the conversation so far, and whatever it reads from your accounts to answer it. When Orizon signs in to a website for you, a separate Codex step sees a description of the sign-in page, such as its field names. It never receives your passwords or codes.
OpenAI handles this under OpenAI's privacy policy and the terms of your ChatGPT account. Your ChatGPT data controls decide whether OpenAI may use it to improve its models. Before you connect any account, turn off Improve the model for everyone in ChatGPT under Settings, Data Controls.
Other people in your data
Your chats, mail and calendar contain other people's names, numbers, messages and plans. So can the public websites the assistant searches for you. Orizon processes this only to help you. When a request needs it, it goes to OpenAI to write the answer, and the answer reaches you through the app you chat with Orizon in. We do not contact these people, build profiles of them, or use their data for anything else. It is kept and deleted on the same terms as yours.
We cannot tell each of these people individually without disproportionate effort, so we inform them through this policy. Anyone who thinks Orizon holds their data can write to privacy@orizon.fun.
Actions Orizon takes for you
Orizon mostly reads. It can never send messages from your WhatsApp or change anything in a Google account. It keeps its own reminders calendar, creates booking links when you ask, and messages you before your reminders. When it spots something in your chats that looks like a reminder, it saves it as a suggestion, with a note of where it came from, and asks you. Only reminders you accept send you a message.
A website you sign in to in the browser is different. The browser is signed in as you, so the assistant could act there as you, for example by sending a message or making a purchase. Even reading can change things, such as marking a message as read. The assistant is told to ask you before it acts. But AI can make mistakes, and text on a web page or in a message can try to mislead it. Only sign in to websites where you accept that risk, and disconnect any you no longer need.
Links in Orizon's answers are shortened to go.orizon.fun links. Like any link, anyone you share one with can open it.
What is kept, and for how long
| What | How long |
|---|---|
| Recent messages kept to stay up to date | At most 7 days. Older ones are deleted every hour. They and your contacts' names are deleted when you disconnect that account. |
| Sign-ins to your accounts | Until you disconnect, or the service signs you out. |
| Other data websites store in the browser, as in any browser | Until you delete your account. |
| Your conversations with Orizon, including what the assistant read | Until you delete your account. |
| Reminders, suggested reminders and short links | Until you delete your account. |
| Technical logs on your server, such as chat and contact names, never message text | Until your assistant's software is next updated. |
| Website passwords and codes you type, voice note audio | Never stored. |
| Your sign-up on our waitlist | Until you ask us to remove it. |
| All of the above | Deleted within 30 days of your request to delete your account. |
Meta keeps messages on the WhatsApp Business Platform for up to 30 days to deliver them.
Companies that process data
These companies help run Orizon. Each receives only what its role needs.
| Company | Role | What it receives |
|---|---|---|
| Meta | Carries WhatsApp messages between you and Orizon. | Your number, profile name, and the messages you exchange with Orizon. |
| Apple | Carries iMessage messages between you and Orizon. | Your number or Apple ID and the messages you exchange with Orizon. |
| Telegram | Carries Telegram messages between you and Orizon. | Your Telegram account, profile name and the messages you exchange with Orizon. |
| OpenAI | Runs the AI, through your own ChatGPT account. | What the assistant reads to answer you. |
| Your server's host, such as Amazon Web Services | Runs your server. | Everything stored on your server. |
| Cloudflare | Connects some servers to the internet. | Pages and links served by those servers, such as sign-in pages. |
| Microsoft (Bing) | Web search. | The searches the assistant makes for you. |
| Hosts our sign-up waitlist. | Waitlisted phone numbers and sign-up times. | |
| GitHub | Hosts orizon.fun. | Visitors' IP addresses and browser details. |
The accounts you connect and the websites the assistant visits receive its requests, as they would from your own browser. Their own privacy policies cover what they hold. A map link in an answer opens Google Maps with the place in it.
Orizon is based in the United States, and some of these companies process data there or elsewhere outside your country. Where the GDPR applies, these transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Email us for a copy of the safeguards.
We disclose data to authorities only when the law requires it.
Legal bases
Where the GDPR applies, we rely on these legal bases.
| What we do | Legal basis (GDPR) |
|---|---|
| Run your assistant and use the accounts you connect | Performing our contract with you, Article 6(1)(b). |
| Read sensitive information in your accounts when a request needs it | Your explicit consent, Article 9(2)(a). You can withdraw it by disconnecting the account. Processing before that stays lawful. |
| Sign you up, message you to get started, keep the waitlist | Steps you asked for before a contract, Article 6(1)(b). |
| Process other people's data that appears in your accounts | Legitimate interest in providing the assistant you asked for, Article 6(1)(f). |
| Keep the servers secure and fix faults | Legitimate interest, Article 6(1)(f). |
| Answer legal requests | Legal obligation, Article 6(1)(c). |
Orizon needs your phone number or messaging account to work. Connecting each account is your choice. Orizon works without it, with less to go on.
Disconnecting and deleting
- Disconnect one account. Ask Orizon for your connections and tap Disconnect. Orizon revokes its access where the service allows it, and deletes the sign-in from your server. For a website, that removes its cookies from the browser, so also end the session in the website's own security settings. You can remove access from the service itself too, for example under Linked devices in WhatsApp or at myaccount.google.com/permissions.
- Delete your account and everything with it. Email privacy@orizon.fun with the number or account you chat with Orizon from. We confirm by message there. Within 30 days we disconnect every account, delete your server and everything on it, remove your number from our message routing and the waitlist, and tell you when it is done.
- Stop messages from Orizon. Block Orizon in the app you chat with it in, or email us and we will stop. This does not delete your data. Ask us for that.
Deleting your Orizon data does not delete what OpenAI, Meta, Apple, Telegram or your connected services hold under your own accounts with them.
Your rights
Wherever you live, you can ask us for a copy of your data, to correct it, or to delete it. Under the GDPR you can also ask us to restrict how we use it, to give it to you in a portable format, and you can object to any use based on legitimate interest.
Email privacy@orizon.fun. We may first ask you to confirm with a message from the account you use with Orizon. We answer within one month.
If you are in the EU, you can also complain to a data protection authority, in particular the one in the country where you live or work, or where you think the problem happened.
Google accounts
When you connect a Google account, Orizon asks Google for read-only access to Gmail and Google Calendar, plus your email address and name. It uses this only to answer you. Google data goes to OpenAI only so Codex can write your answer, which is why you should turn off Improve the model for everyone in ChatGPT before you connect Google.
Orizon's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The website and sign-up
orizon.fun is hosted by GitHub Pages, which receives your IP address and browser details to serve the page. The site sets no cookies, has no analytics or trackers, and does not track you across other sites, so it treats browsers that send Do Not Track like any other.
The sign-up page asks for your phone number so Orizon can message you to get started. If we cannot start you yet, we put your number and the time you signed up on our waitlist, a Google Sheet.
The sign-in pages on go.orizon.fun set one strictly necessary cookie. It ties a sign-in page to the device that opened it, so nobody else can use the link. It expires when you close the browser.
Security
- Each person's assistant runs on a separate server.
- Connections to Orizon over the internet use HTTPS. Inside our hosting network, messages and sign-in pages pass from our front-door server to yours over a private connection.
- Website passwords and codes are never stored, written to logs, or shown to the AI.
- Our own keys are kept away from the AI.
- The two of us can access the servers we run, to operate and secure them.
No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
Children
Orizon is for people aged 18 and over. If you believe a child is using it, email us and we will delete their data.
Changes to this policy
We update this page when Orizon changes how it handles data, and change the date at the top. If a change affects how your data is used, we tell you by message before it takes effect.