Privacy

Requests from the people in your data

Find, export, delete or opt out one person, from the dashboard or from a request form you link from your privacy policy.

In the dashboard

Settings > Privacy > "Find, export or delete one person": type their email address and / or phone number (international format). They are hashed on the server with this workspace's rules and not stored. Only this workspace is searched.
Find shows what OrcLink holds; export gives it as a file; delete removes it (type "delete" to confirm); opt-out treats their recorded visits as refused consent from now on.
Each action is recorded (who, when, which action, counts only; never an email address or phone number) and kept 3 years.
Only workspace owners and admins can see and change the privacy settings.

Off until you turn it on (Settings > Privacy > "Request form for the people in your data"). Link the address it shows from your privacy policy.
A person asks for access, deletion or an opt-out. The form only records the request: its type, the hashes of the email or phone (never the values), an optional contact email (stored encrypted) and the time. You act on it in Settings > Privacy with one click.
Everyone gets the same answer: it never says whether OrcLink holds data about them.

A deletion keeps no record of the person. Delete them in your connected systems too (CRM, store, call tracking): the next sync or import brings their records back.
People are found by the hashes of their email and phone, and through what those records link to deterministically (a click, a visit, a call). Someone who never gave an email or phone cannot be found this way.