Privacy version 2026-09-28
Privacy Notice
O²RCA is designed as a stateless pilot. Assessment work is stored in your browser and in files you choose to save. O²RCA does not create a centrally hosted user profile or work-product database.
Identity and session data
In the hosted app, Microsoft Entra authenticates you and provides an identifier for session attribution. The app records your session start and acceptance versions in the local audit trail.
AI and diagnostics
Content you intentionally submit for AI analysis is sent through the Azure relay to the configured Azure AI service. Hosted error reports contain technical error metadata and are designed to exclude assessment content.
Contact form
When you use the public contact form, O²RCA sends your name, email address, optional organization, and message through Gmail so the program team can respond. Google reCAPTCHA processes device and interaction information to prevent automated abuse.
O²RCA does not create a contact-message database. Sent and received copies remain in the applicable Gmail mailboxes according to the mailbox retention settings maintained by their owners.
Control and retention
Use Save Engagement to keep your work, clear browser storage to remove local data, and follow your organization’s retention and privacy requirements.