Privacy Policy

Effective date and last updated: July 20, 2026

Orange Sun, LLC (“Orange Sun,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy and Pulp Free Chat Software Privacy Notice (“Notice”) explains how we collect, use, disclose, retain, and protect personal information in connection with:

  • the Orange Sun websites, online store, forms, and related pages that link to this Notice, including orangesun.ai and applicable subdomains (collectively, the “Site”);

  • Pulp Free Chat software (“Pulp”);

  • Pulp Accounts, authentication, software updates, model and component downloads, and other network-connected Pulp functions (collectively, “Online Features”);

  • customer support, feedback, communications, notifications, community or forum features, and other services that link to this Notice; and

  • purchases, pre-orders, campaigns, and other interactions with Orange Sun.

In this Notice, “personal information” includes “personal data” and similar terms used by applicable privacy laws. It generally means information that identifies, relates to, describes, can reasonably be associated with, or can reasonably be linked to an individual or household. It does not include information excluded from applicable law, such as properly de-identified or aggregated information.

A product-specific, feature-specific, cookie, model-provider, or just-in-time notice may supplement this Notice. Where a supplemental notice expressly conflicts with this Notice for a particular feature or processing activity, the more specific notice controls for that feature or activity. This Notice does not create contractual rights beyond those required by applicable law and does not limit rights that cannot lawfully be waived.

This Notice does not govern a third-party website, model provider, remote-access product, integration, operating system, employer, school, device administrator, or other person or service that maintains its own privacy practices. Separate notices may apply to Daisy hardware, other Orange Sun products, employment or applicant information, or services not expressly covered here.

1. Pulp privacy overview

1.1 Local Model Mode

When you use a model identified in Pulp as local, model inference occurs on a device or local system under your control. In ordinary Local Model Mode operation, Pulp does not transmit your chats, documents, prompts, model inputs, embeddings, local retrieval collections or vector indexes, retrieved passages, or model outputs to Orange Sun for inference.

Local content may be stored in databases, caches, logs, temporary files, model context, embeddings, retrieval stores, synchronized folders, or backups on your device or local network. Orange Sun does not receive that content merely because you use Local Model Mode and ordinarily cannot access, recover, export, correct, or delete it.

1.2 Accounts and network communications

Pulp requires a basic Account and an email address. Orange Sun or our service providers receive information needed to create, authenticate, secure, and administer that Account. Pulp may also communicate with Orange Sun or our service providers when you accept legal terms, request a model or component download, use support, or use another Online Feature.

Pulp checks for software or catalog updates only when you enable or manually invoke that function. An update check or download request may transmit ordinary technical and network information, such as an IP address, Account or installation identifier, software version, operating system, processor architecture, requested file, transfer status, and error information. It does not require transmission of the prompts, documents, or outputs you later process locally.

1.3 Optional Cloud Model Features

Pulp may offer optional cloud-connected models or other cloud processing features. A feature identified as cloud-connected is not Local Model Mode. When you affirmatively select a Cloud Model Feature, the prompt, attachments, selected context, model input, model output, and technical information needed to perform the request may be transmitted to Orange Sun, the identified model provider, and their service providers.

Before first use of a Cloud Model Feature, Pulp will provide a just-in-time notice describing the provider or provider category, the information transmitted, and applicable terms. The notice or provider terms may also address retention, human review, model improvement or training, international transfers, and security. Do not submit confidential, privileged, regulated, or sensitive information to a Cloud Model Feature unless you have reviewed and accepted those terms and are authorized to make the disclosure.

Installing Pulp or using Local Model Mode does not by itself authorize transmission of local content to a Cloud Model Feature.

1.4 Local processing is not a security guarantee

Local processing limits what is ordinarily sent to Orange Sun, but it does not guarantee confidentiality, security, isolation, or immunity from access. Local content may be accessible to or exposed through:

  • malware, ransomware, spyware, attackers, or compromised software or dependencies;

  • anyone with physical access, credentials, administrative privileges, or access to an unencrypted backup;

  • the Pulp Account holder, household server administrator, or another household user where profiles or storage are shared;

  • an employer, school, device owner, system administrator, managed-service provider, endpoint-monitoring system, or data-loss-prevention system;

  • operating-system indexing, logs, search, backup, synchronization, crash handling, recovery, or cloud-storage tools;

  • remote desktop, VPN, router, proxy, firewall, tunnel, browser engine, plugin, integration, or network-monitoring tools; and

  • vulnerabilities, configuration errors, weak credentials, exposed ports, lost devices, or other circumstances outside Orange Sun’s control.

If you use Pulp on a company-, school-, or organization-owned or managed device, that organization may be able to monitor activity, inspect local storage, retain backups, access content, or remotely manage or erase the device under its policies and applicable law.

1.5 Crash reports and diagnostics

The current Pulp Free Chat release does not automatically transmit crash reports or diagnostic bundles to Orange Sun. If a later update introduces diagnostics, we will describe the categories collected and whether the feature is automatic or optional before materially different processing begins. We will request consent where applicable law requires it.

1.6 Household installations

A Pulp Account holder may operate a private household installation for people who ordinarily live in the same household (“Household Members”). Household use may include simultaneous access, but Pulp Free Chat may not provide separate histories, confidentiality between users, access isolation, or reliable concurrent performance.

The Account holder or person administering the household device or server may be able to inspect chats, documents, local databases, embeddings, retrieval indexes, logs, caches, backups, credentials, and other local content. Online requests made through a shared installation may be associated with the Account holder, and Orange Sun may not know which Household Member initiated a particular request. The Account holder should make this Notice available to Household Members before permitting them to use Pulp or an Online Feature.

2. Information we collect

The information we collect depends on how you interact with us and which features you use.

2.1 Information you provide through the Site or directly to Orange Sun

We may collect:

  • your name, email address, phone number, and mailing, shipping, or billing address;

  • order, pre-order, campaign, refund, cancellation, shipment, and delivery information;

  • messages, inquiries, support requests, survey responses, feedback, reviews, forum or community posts, and files or screenshots you choose to submit;

  • marketing, communication, notification, and cookie preferences;

  • business, organization, partnership, press, investor, supplier, or other professional information you provide;

  • information included in applications, interest forms, event registrations, waitlists, or similar submissions; and

  • any other information you deliberately provide or authorize another person to provide to us.

Do not send passwords, full payment-card details, government identifiers, health records, privileged materials, confidential client information, or other sensitive information through a general contact or support channel unless we specifically request it through an appropriate method.

2.2 Payment and transaction information

When the Site offers paid products, payment information is processed by our payment processor. Orange Sun does not store full payment-card numbers on its own systems. We may receive transaction identifiers, payment status, billing contact information, fraud or risk signals, and limited card information such as card type and the last four digits.

Pulp Free Chat is licensed without a software license fee, but the Site may offer hardware, shipping, subscriptions, accessories, or other products and services governed by separate terms.

2.3 Pulp Account and authentication information

Pulp requires a basic Account. We may collect or generate:

  • your email address and Account identifier;

  • authentication records, password hashes, passkeys, security keys, or authentication tokens managed by us or our authentication provider;

  • verification status, sign-in timestamps, failed login attempts, security events, IP address, and device or browser information;

  • locale, language, time zone, and approximate region;

  • Account status, access permissions, feature availability, and preferences;

  • parental or guardian authorization records, age band, or eligibility confirmation where an age-related process is implemented; and

  • communications, notices, and support history associated with the Account.

We do not need to receive your local chats or documents to create or authenticate a Pulp Account.

2.4 Agreement, consent, and acceptance records

When you accept the Pulp Free Chat End User License Agreement, this Notice, a model license, or another applicable agreement or consent, Pulp or Orange Sun may create a structured record that includes:

  • the agreement or notice name, version, effective date, and cryptographic hash;

  • an immutable copy of the text shown or an identifier that allows us to reproduce it;

  • the date and time of acceptance;

  • the Pulp, installer, or model-catalog version;

  • locale and language;

  • Account, user, device, browser, or installation identifiers;

  • the acceptance method and interface event; and

  • any separately presented acknowledgment or opt-out record.

An acceptance record may remain on your device and may be transmitted or synchronized to Orange Sun when Pulp is connected. Synchronization is not guaranteed. A failed or absent synchronization does not undo an acceptance recorded locally or otherwise established.

2.5 Software-update, catalog, model, and component information

When you enable or manually request an update or catalog check, or request a model or component download, we or our hosting and content-delivery providers may receive:

  • IP address, request time, and general network information;

  • Account, access, device, or installation identifier;

  • Pulp version, release channel, update setting, and installer version;

  • operating system, processor architecture, compatibility information, and user agent;

  • the requested model, component, tag, version, quantization, file, or immutable digest;

  • installed or available component information where needed to determine compatibility;

  • download status, bytes transferred, retries, error codes, and transfer diagnostics; and

  • applicable third-party-license display or acceptance records.

A download request can reveal which model or capability you selected. Downloading a model does not require us to receive the prompts, documents, or outputs you later process locally with it.

2.6 Support, feedback, community, and deliberate submissions

If you contact support, submit feedback, post to a community or forum, or otherwise send content to Orange Sun, we collect the information you provide. Support information may include Account details, Pulp version, device information, troubleshooting steps, correspondence, screenshots, logs, or diagnostic files you choose to submit.

Review files and logs before sending them. Filenames, paths, screenshots, stack traces, logs, and diagnostic bundles can contain personal, confidential, privileged, or regulated information. Public or community posts may be visible to other users, search engines, or the public and may remain available through copies, archives, or quotations after you delete the original.

2.7 Site, cookie, device, and network information

When you visit or interact with the Site, we and our service providers may automatically collect:

  • IP address and approximate location derived from IP address;

  • browser, device, operating-system, display, language, and time-zone information;

  • referring and exit pages, pages viewed, links clicked, search terms, dates, times, and session activity;

  • cookie, session, analytics, advertising, and similar identifiers;

  • cart, checkout, campaign, and form-interaction information; and

  • security, fraud, abuse-prevention, availability, and performance information.

Our Site and online store are currently operated using Squarespace. Squarespace may process Site, commerce, cookie, and related information on our behalf and may process certain information under its own privacy notice where applicable. We may also use payment, shipping, email, analytics, hosting, content-delivery, security, or support providers.

2.8 Cloud Model Feature information

When you affirmatively use a Cloud Model Feature, Orange Sun, the identified model provider, and their service providers may receive:

  • your prompt, instructions, attachments, selected documents, images, audio, or other context;

  • model input and generated output;

  • Account, authentication, entitlement, or access information;

  • model selection, parameters, safety settings, request identifier, and feedback;

  • IP address, request time, latency, usage or token measurements, and error information; and

  • other information described in the just-in-time notice for that feature.

The provider’s retention, human-review, model-improvement, training, security, and international-transfer practices may differ from Orange Sun’s. The applicable just-in-time notice and provider terms control those provider-specific practices.

2.9 Diagnostics and performance information

Pulp currently sends no automatic crash reports or diagnostic bundles to Orange Sun. If a future version introduces diagnostics, the data may include operating-system and hardware information, Pulp version, feature state, performance measurements, stack traces, error codes, local log excerpts, and network state. Although diagnostics should be designed to minimize User Content, technical logs can sometimes contain filenames, paths, fragments, prompts, retrieved text, or outputs. We will provide notice and any legally required choice before collection begins.

2.10 Sensitive personal information

Normal Site and Pulp Account operation is not intended to collect government identifiers, precise geolocation, biometric identifiers used for identification, medical records, or other highly sensitive information, except for Account credentials and any information you choose to submit.

You may nevertheless place sensitive or regulated information in local Pulp content, a support request, public post, purchase record, or Cloud Model Feature. Do so only if you are authorized and the selected channel is appropriate. Where applicable law requires consent for the intentional processing of sensitive personal information, we will request it or provide an appropriate control. We do not use sensitive personal information to infer characteristics about you except as separately disclosed and permitted by law.

2.11 Local content Orange Sun does not receive in Local Model Mode

In ordinary Local Model Mode operation, Orange Sun does not collect merely because you use Pulp:

  • chats and conversation history;

  • prompts or model inputs;

  • model outputs;

  • imported documents, files, images, or audio;

  • locally generated embeddings;

  • local retrieval collections, vector indexes, search results, or source passages, including data stored in ChromaDB or a similar local component;

  • local model context, memories, or knowledge bases; or

  • local backups of the foregoing.

Orange Sun cannot use, sell, disclose, train on, recover, correct, export, or delete local content that it never receives. That content may still be accessed, copied, lost, corrupted, or disclosed through your device, network, backups, administrators, integrations, remote-access configuration, or other systems outside Orange Sun’s possession.

3. Sources of personal information

We may collect personal information:

  • directly from you;

  • automatically from your browser, device, Pulp installation, or network request when you use the Site or an Online Feature;

  • from Squarespace and other providers that operate the Site, store, Account, authentication, email, payments, shipping, hosting, content delivery, analytics, fraud prevention, security, or support;

  • from an organization that creates, authorizes, or manages an Account, purchase, or device for you;

  • from a Household Member or Account holder using a shared installation;

  • from third-party model providers when you select a Cloud Model Feature;

  • from social networks, community platforms, referral sources, or integrations you choose to use; and

  • from public, commercial, or governmental sources where permitted by law, such as business contact, sanctions, fraud, or security information.

We may combine information from these sources for the purposes described in this Notice.

4. How we use personal information

We may use personal information to:

  1. create, authenticate, maintain, secure, administer, support, suspend, and close Accounts;

  2. provide Pulp activation, software and catalog checks, model and component downloads, Cloud Model Features, and other Online Features;

  3. record agreements, notices, consent, license acceptance, and other legal events;

  4. process, fulfill, and deliver orders and pre-orders and provide purchase, campaign, shipment, delivery, and pre-order-delay updates;

  5. process payments, refunds, cancellations, returns, taxes, and accounting records;

  6. respond to inquiries, support requests, feedback, privacy requests, complaints, and disputes;

  7. send transactional, Account, security, legal, product, service, model-license, and support communications;

  8. send marketing or campaign communications where permitted and honor opt-outs and suppression requests;

  9. operate, maintain, troubleshoot, protect, test, analyze, and improve the Site, Accounts, download infrastructure, Online Features, product delivery, and user experience;

  10. understand aggregate use of the Site, downloads, and Online Features and develop new products, features, services, and business operations;

  11. detect, investigate, prevent, and respond to fraud, abuse, security incidents, prohibited access, spam, misuse, violations of terms, or threats to users, Orange Sun, providers, licensors, or the public;

  12. comply with law, court orders, legal process, tax, accounting, export-control, sanctions, consumer-protection, and recordkeeping obligations;

  13. establish, exercise, investigate, preserve, or defend legal claims and enforce agreements;

  14. conduct audits, due diligence, financing, insurance, corporate governance, and business continuity;

  15. support a proposed or completed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction;

  16. create, use, and disclose aggregated or de-identified information as permitted by law; and

  17. carry out another purpose disclosed when information is collected, with your direction or consent, or as otherwise permitted by law.

We do not use local chats, documents, embeddings, retrieval content, or outputs that Orange Sun never receives.

5. Legal bases for EEA and UK processing

Where European Economic Area or United Kingdom data-protection law applies, our legal bases may include:

  • Contract: processing needed to create and maintain your Account, provide requested downloads or updates, fulfill orders, respond to support, or perform the Pulp software EULA or another agreement;

  • Legitimate interests: securing Accounts and infrastructure, preventing fraud and abuse, maintaining records, delivering and improving services, communicating about products, understanding service use, protecting legal rights, and supporting ordinary business operations, balanced against your rights and interests;

  • Consent: nonessential cookies, marketing, optional diagnostics, Cloud Model Features, or other processing where we ask for consent; and

  • Legal obligation: tax, accounting, sanctions, consumer, law-enforcement, regulatory, and other legal requirements.

Where we rely on consent, you may withdraw it prospectively. Withdrawal does not affect processing already completed lawfully. Some information is required to create an Account, process an order, or provide a requested feature; without it, we may be unable to provide that Account, transaction, or feature.

6. How we disclose personal information

We may disclose personal information to the following categories of recipients.

6.1 Service providers and processors

We use service providers for website and commerce hosting, Account authentication, cloud infrastructure, content delivery, model hosting, email, communications, support, analytics, payments, shipping, fraud prevention, security, legal services, accounting, insurance, and other business operations. These providers may process information to provide services to us and, where permitted, for their own disclosed and lawful purposes.

Squarespace currently provides our Site and commerce platform. Payment processors process payment credentials; shipping carriers receive delivery information; hosting and content-delivery providers receive ordinary request and transfer data; and email, analytics, security, or support providers receive information needed for their services. Provider identities and functions may change as our business and technology change.

6.2 Affiliates and business partners

We may disclose information to current or future affiliates under common control, and to business partners where needed to provide a requested product, integration, campaign, event, or service, subject to applicable law and any additional notice required.

6.3 Model and component providers

When you affirmatively use a Cloud Model Feature, we may transmit the information needed for the request to the identified model provider and its processors. When you download a third-party model or component, we may disclose or receive access, entitlement, or license-acceptance information where required by applicable terms. We do not send local prompts or documents to a model provider merely because you download a model for local use.

6.4 At your direction or in public areas

We disclose information when you direct or authorize us to do so, such as when you connect an integration, use a Cloud Model Feature, ask us to send information to another person, or post in a public or community area.

6.5 Legal, safety, security, and rights protection

We may preserve, use, or disclose information if we reasonably believe doing so is necessary or appropriate to:

  • comply with law, regulation, legal process, subpoena, court order, or governmental request;

  • investigate, prevent, or respond to fraud, security incidents, unauthorized access, abuse, or illegal activity;

  • protect the rights, safety, property, Accounts, systems, users, employees, contractors, licensors, providers, or the public;

  • enforce agreements, policies, licenses, and acceptable-use requirements; or

  • establish, exercise, or defend legal claims.

Where permitted, we may notify you of a legal demand, but we are not required to do so where notice is prohibited, impracticable, or could create risk.

6.6 Corporate transactions

We may disclose or transfer information in connection with a proposed or completed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, joint venture, or transfer of all or part of our business. A recipient may continue to process information under this Notice unless it provides a new notice as required by law.

6.7 Aggregated and de-identified information

We may use and disclose information that has been aggregated or de-identified so that it cannot reasonably be associated with an identified or identifiable person. Where required, we will maintain the information in de-identified form and not attempt to re-identify it except to test our de-identification process, protect security, or as otherwise permitted by law.

7. Cookies, analytics, sale, sharing, and targeted advertising

7.1 Cookies and similar technologies

We use cookies and similar technologies to operate the Site and checkout, maintain secure sessions and carts, remember preferences, prevent fraud, measure performance, understand use, and—where enabled—support analytics, advertising, social-media, or campaign functions.

Cookie categories may include:

  • Strictly necessary cookies, which are required for Site, Account, security, cart, or checkout functions;

  • Functional cookies, which remember choices and improve usability;

  • Analytics cookies, which help us understand how the Site is used and improve performance; and

  • Marketing cookies, which may measure campaigns or deliver relevant advertising where enabled.

Some cookies are set by third parties, including Squarespace or other providers, and may be governed by their own notices. Additional information and controls appear in our Cookie Policy at https://www.orangesun.ai/cookie-policy, which supplements this Notice.

Where required, we request consent before setting nonessential cookies. You can use the Site’s cookie controls or your browser settings to manage or delete cookies, although blocking some cookies may impair functionality.

7.2 Sale, sharing, and targeted advertising

Orange Sun does not sell personal information for monetary consideration. We do not sell Pulp Account information or local Pulp chats, documents, prompts, embeddings, retrieval data, or outputs.

When enabled, certain analytics, advertising, or social-media technologies may disclose identifiers and internet or network activity to third parties in a manner that some privacy laws define as a “sale,” “sharing,” or targeted advertising even when no money changes hands. Where applicable law requires it, we provide a cookie or privacy control to opt out and honor legally recognized opt-out preference signals, such as Global Privacy Control, for the browser or device that sends the signal.

We do not knowingly sell or share personal information of children under 16 for cross-context behavioral advertising. We do not offer a financial incentive in exchange for personal information unless separately disclosed with any legally required terms.

7.3 Do Not Track

Because there is no uniform industry standard for browser “Do Not Track” signals, the Site may not respond to every such signal. We honor legally recognized opt-out preference signals where required.

8. Local storage, household use, organizations, and remote access

8.1 Local storage and components

Pulp and its components may create local databases, logs, caches, temporary files, indexes, embeddings, model files, configuration files, and backups. Depending on configuration and an event, local technical files may contain filenames, paths, prompts, document excerpts, retrieved text, outputs, or other content.

Pulp may use ChromaDB or another local retrieval, embedding, indexing, or vector-database component. Exact component names, versions, sources, and licenses are provided through Pulp’s Licenses or About interface and the artifact-specific notice files supplied with the installed build or download; they are not fixed in this Notice.

Uninstalling Pulp, closing an Account, or deleting an application may not remove every local model, database, embedding, log, cache, backup, synchronized copy, or file. Use Pulp’s controls, your operating system, and your backup or device-management tools to manage local content.

8.2 Household use

A Pulp Account holder may permit Household Members to use a private local installation. The Account holder may control the Account, device, server, profiles, credentials, storage, remote-access settings, logs, and backups. Depending on configuration, the Account holder, server administrator, or another Household Member may be able to inspect or retrieve another user’s content.

Pulp Free Chat does not promise per-user privacy, separate histories, access isolation, or confidentiality among Household Members unless a specific feature expressly says so. Household Members should ask the Account holder how the installation is administered before processing sensitive information.

Orange Sun is responsible for Account, acceptance, update, download, support, cloud-feature, and other information Orange Sun actually receives as described in this Notice. Orange Sun is not the controller of local household content merely because Household Members use Pulp.

8.3 Employer, school, and organization use

If an employer, school, or organization authorizes or requires you to use Pulp, that organization may control local devices, networks, remote-access tools, content, retention, monitoring, backups, Accounts, and policies associated with its use. It may be able to inspect or retrieve local content even when Orange Sun cannot. Its privacy notice, employment policies, acceptable-use rules, legal holds, and monitoring practices may apply.

Orange Sun processes the Account, update, download, acceptance, support, and other information described in this Notice unless a written agreement states otherwise. An organization may be a separate controller or business for local content and other information it controls.

8.4 User-configured remote access, backups, and integrations

You may configure Pulp for access through a private LAN, VPN, remote desktop, router, proxy, tunnel, port forwarding, or another method. You may also use third-party plugins, integrations, operating systems, browser engines, backup services, synchronization services, security tools, or network providers. Those technologies may transmit, monitor, copy, store, or expose local content under their own terms and privacy notices.

Orange Sun does not receive information merely because you configure remote access or use a third-party tool, unless the connection or tool uses an Orange Sun service that is separately disclosed. Orange Sun does not control or secure a connection, device, network, integration, or backup that it does not operate.

9. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Notice, taking into account the nature and sensitivity of the information, the duration of your Account or relationship with us, operational and security needs, applicable licenses and contracts, legal and tax obligations, dispute and enforcement needs, and the availability of deletion or de-identification methods.

Examples include:

  • Account information: generally for the life of the Account and for a reasonable period after closure to complete deletion, prevent fraud, maintain security, resolve disputes, and comply with law;

  • Agreement, consent, EULA-acceptance, and dispute records: for the life of the Account plus seven years after Account closure, and longer where reasonably needed for a pending claim, legal hold, investigation, or legal requirement;

  • Order, payment, shipping, tax, and accounting records: for the period required by applicable tax, accounting, consumer, and commercial law and for related disputes;

  • Security, authentication, update, catalog, and download logs: for as long as reasonably needed to operate and secure the service, detect abuse, troubleshoot delivery, honor model licenses, maintain release records, and establish or defend legal claims;

  • Support, feedback, and dispute records: for as long as needed to handle the matter and for a reasonable period afterward for continuity, training, quality, security, and legal purposes;

  • Marketing information: until you unsubscribe or we determine the information is no longer current, while retaining the minimum suppression record needed to honor your opt-out;

  • Cookie and analytics information: according to the applicable purpose, cookie settings, provider configuration, and legal requirements;

  • Cloud Model Feature content: as stated in the applicable just-in-time notice and provider terms; and

  • Backups: until overwritten or deleted through ordinary backup, disaster-recovery, or legal-hold processes.

We may retain information longer where reasonably necessary for litigation, regulatory inquiry, legal hold, security investigation, fraud prevention, tax or accounting obligations, enforcement of agreements, protection of legal rights, or as otherwise permitted or required by law. We may retain aggregated or de-identified information as permitted by law.

Local chats, documents, outputs, embeddings, retrieval stores, model files, logs, caches, and backups on systems under your control remain there until you or the applicable device owner, administrator, backup provider, or organization deletes them. Closing your Pulp Account does not automatically delete local content.

10. Security and limits of our control

We use reasonable administrative, technical, and physical safeguards designed to protect personal information in our possession, taking account of the nature of the information and the risks involved. Measures may include access controls, encryption in transit, credential protection, logging, vendor controls, patching, backups, monitoring, and incident-response procedures.

No method of transmission, software, remote access, or storage is completely secure. To the maximum extent permitted by law, Orange Sun cannot and does not guarantee that Orange Sun systems, the Site, Pulp, your Account, your device, local storage, remote connection, model files, backups, or third-party services will never be compromised or that unauthorized persons will never access, intercept, alter, delete, encrypt, copy, or disclose information.

Orange Sun does not control and cannot secure:

  • a device or network owned or administered by you, an employer, school, Household Member, or another organization;

  • your operating system, Account credentials, local database, encryption keys, backups, or remote-access configuration;

  • third-party plugins, integrations, model providers, cloud-sync services, security tools, or network operators; or

  • an attacker, malware, compromised dependency, configuration error, lost device, or person with authorized or unauthorized access.

You are responsible for protecting your credentials, devices, operating systems, local networks, databases, retrieval stores, model files, encryption keys, remote-access tools, and backups. Use strong and unique authentication, device encryption, least-privilege access, appropriate network controls, current security updates, and tested backups suited to the sensitivity of your information.

Contact us promptly if you suspect unauthorized Account activity. For local device compromise, also contact the device owner or administrator, your security provider, and appropriate authorities as needed.

If a security incident affects personal information in Orange Sun’s possession, we will investigate and provide notices required by applicable law. We cannot investigate, recover, or notify you about a compromise limited to local content we do not possess unless someone reports the incident to us with sufficient information.

11. Your choices

11.1 Local and cloud models

Choose a model identified as local when you want inference to occur on your device or local system. Do not select a Cloud Model Feature unless you are comfortable transmitting the information identified in the just-in-time notice under the applicable provider terms.

11.2 Update checks

You may enable, disable, or manually invoke update checks using the controls Pulp provides. Disabling update checks may leave security issues uncorrected, prevent notice of compatible models or features, or make an Online Feature unavailable.

11.3 Diagnostics

Pulp currently sends no automatic diagnostics. If a future diagnostic feature provides a choice, you may decline or disable it as described in the product, subject to any information necessary to respond to a support request you initiate.

11.4 Marketing and communications

You may opt out of marketing email through the unsubscribe link or by contacting us. We may still send nonmarketing communications about your Account, security, legal terms, orders, pre-orders, downloads, updates, support, or other transactions.

11.5 Cookies and privacy signals

Use the Site’s available cookie or privacy controls, browser settings, or a legally recognized opt-out preference signal to manage nonessential cookies and applicable sale, sharing, or targeted-advertising choices.

11.6 Account closure

You may request Account closure through available Account controls or by contacting support@orangesun.ai. Account closure may terminate access to Pulp or Account-dependent functions. It does not automatically delete local content from devices, organization-controlled systems, backups, synchronized folders, or third-party providers.

11.7 Local content

Use Pulp’s local controls, your operating system, and your backup or device-management tools to manage local content. Orange Sun cannot fulfill an access, correction, portability, or deletion request for local content Orange Sun does not possess.

12. Privacy rights and requests

Depending on where you live and subject to legal exceptions, you may have rights to:

  • know or confirm whether we process your personal information;

  • access personal information and obtain a copy;

  • correct inaccurate personal information;

  • delete personal information;

  • obtain portable data you provided;

  • restrict or object to processing;

  • withdraw consent;

  • opt out of targeted advertising, sale, sharing, or certain profiling;

  • limit certain uses or disclosures of sensitive personal information;

  • receive information about categories, sources, purposes, recipients, and retention;

  • appeal a denial of a privacy request;

  • receive equal service and not be unlawfully discriminated against for exercising a privacy right; and

  • complain to a data-protection authority or regulator.

12.1 How to submit a request

Email support@orangesun.ai with the subject “Privacy Request.” Describe the right you wish to exercise and identify the email address associated with your Account or interaction with us.

We may request information reasonably necessary to verify your identity, Account, authority, and jurisdiction. We will use verification information for the verification and security process. An authorized agent may submit a request where permitted by law, but we may require proof of authority and verification directly from the individual.

We may deny, limit, or charge a reasonable fee for a request where applicable law permits, including when we cannot verify the request; an exception applies; the request is fraudulent, abusive, manifestly unfounded, excessive, repetitive, or technically infeasible; compliance would impair security or the rights of others; or we must retain the information for legal, contractual, safety, fraud-prevention, or dispute purposes. We will explain a denial where required.

If applicable law gives you a right to appeal, reply to our decision with the subject “Privacy Appeal” and explain why you believe it should be reconsidered. We will respond within the period required by law and provide any required information about contacting the appropriate regulator.

We cannot use an Account request to access, correct, export, or delete local content Orange Sun does not possess. Contact the employer, school, device owner, administrator, backup provider, model provider, or other controller that possesses the information.

12.2 California and other U.S. state disclosures

To the extent applicable U.S. state privacy law applies, the categories of personal information we collect or may collect include:

  • identifiers and contact information;

  • customer-record and Account information;

  • commercial, order, pre-order, payment-status, shipping, and transaction information;

  • internet, network, browser, device, cookie, download, and application activity;

  • approximate location derived from IP address;

  • audio, visual, electronic, communication, or support information you submit;

  • professional, organizational, or business-contact information;

  • preferences and inferences derived from Site, Account, or transaction activity; and

  • sensitive personal information such as Account credentials, age or parental-authorization records, and sensitive content you deliberately submit.

The sources are described in Section 3; purposes in Section 4; recipient categories in Section 6; sale and sharing practices in Section 7; and retention criteria in Section 9.

Where required, you may request access, correction, deletion, portability, opt-out of sale or sharing, opt-out of targeted advertising or qualifying profiling, or limitation of certain sensitive-personal-information uses. We do not use sensitive personal information to infer characteristics about you except as separately disclosed and permitted by law. We do not disclose personal information to third parties for their own direct marketing except as described under cookies, with your direction or consent, or as otherwise permitted by law.

Certain rights may not apply to business-contact, employee, applicant, or other information excluded or exempted by applicable law.

12.3 EEA and UK rights

Where EEA or UK law applies, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may object at any time to processing for direct marketing. You may lodge a complaint with your local supervisory authority.

Orange Sun does not currently use Site or Pulp Account information to make solely automated decisions that produce legal or similarly significant effects on you. Outputs generated locally through Pulp are under your control and are not decisions Orange Sun makes about you. If we introduce qualifying automated decision-making about individuals, we will provide any notice and rights required by law.

13. Children and minors

Pulp Accounts and acceptance of the Pulp Free Chat End User License Agreement are limited to individuals who are at least 18 years old and at least the age of legal majority where they live.

An adult parent or legal guardian who holds the Pulp Account may permit a Household Member who is at least 13 but under 18 to use a private household installation for personal purposes under the adult’s authorization and supervision. The minor does not receive an independent Account and does not independently accept the EULA or Third-Party Terms.

A person under 13 may not use Pulp, create an Account, or use an Online Feature.

Parents and guardians are responsible for selecting appropriate models and features, supervising use, and preventing minors from independently submitting personal information through Account registration, support, public or community features, Cloud Model Features, or other Online Features.

If we learn that we collected personal information from a child contrary to applicable law or these requirements, we may restrict access, close the Account, delete the information, or take other legally required steps.

14. International transfers

Orange Sun is located in the United States. Personal information may be processed in the United States and other countries where our service providers, payment providers, hosting providers, content-delivery providers, or model providers operate. Those countries may have privacy laws different from those where you live.

Where required, we use legally recognized transfer mechanisms or safeguards and provide additional information upon request. A Cloud Model Feature may involve transfers to locations identified in its just-in-time notice or provider terms.

Local Model Mode content that Orange Sun does not receive is transferred only through devices, networks, people, backups, remote-access tools, integrations, or services under your or another organization’s control.

15. Third-party websites, services, models, and components

The Site and Pulp may link to, interoperate with, download from, or make available third-party websites, services, models, software, components, social networks, community platforms, or integrations. Orange Sun does not control their privacy, security, retention, training, or data-use practices and is not responsible for their independent conduct. Review their notices and terms before using them.

Pulp can use a changing catalog of third-party models and components. The exact catalog, versions, and license terms are not fixed in this Notice. Current and artifact-specific information is made available through Pulp’s Licenses or About interface, local LICENSES, NOTICE, or THIRD_PARTY_NOTICES files, the model-download flow, or a license page linked from the Pulp product page. A change in the available model catalog does not necessarily require a change to this Notice unless it materially changes how Orange Sun processes personal information.

A third-party model downloaded for local use does not receive local prompts or outputs merely because Orange Sun hosts the model file. A Cloud Model Feature may transmit content as described in its just-in-time notice and provider terms.

16. Changes to this Notice

We may update this Notice to reflect changes in law, products, features, models, vendors, security, or data practices. We will post the revised Notice with a new “Last updated” date. Unless applicable law requires otherwise, the revised Notice becomes effective when posted.

For a material change, we may provide additional notice through the Site, Pulp, the Account email, installer, update process, or another reasonably conspicuous method and request consent where required. A change to this Notice does not authorize materially different processing of previously collected information where applicable law requires additional notice or consent.

17. Contact us

For privacy questions, requests, appeals, Account privacy matters, or child-privacy concerns, contact:

Orange Sun, LLC

Charlottesville, Virginia, USA

Email:support@orangesun.ai

For legal notices concerning the Pulp software EULA:

Email:licensing@orangesun.ai

Email is not a secure channel for highly sensitive information. Do not include passwords, full payment-card numbers, government identifiers, privileged documents, or sensitive local Pulp content unless we specifically request it through an appropriate method.

Orange Sun™, Pulp™, Daisy™, and Axion™ are trademarks of Orange Sun, LLC. Other names and marks belong to their respective owners.