Privacy Policy
1.Who we are
Filling the Gap is a brand of Orama LLC, a Delaware limited liability company ("Filling the Gap", "we", "us"). We are building AI Office: a team of AI directors that works inside a founder's Slack. This policy covers our website, our promotional pages, our waitlist and the service. Contact: hello@fillingthegap.tech.
2.What information we collect
When you join our waitlist:
- Your email address and your first name
- Your answers to the form's questions (for example, your role in the business, its size, the tools you use and the problem you want to solve)
- Which link or campaign brought you to the form, and the language you filled it in
When you install our Slack bots:
- Your Slack workspace ID
- IDs of channels where the bot is added
- Slack user IDs of people who interact with the bot
When you work with your AI directors:
- The text of the messages you send (so the directors can respond)
- The files generated in your office (saved to your office's GitHub repository)
When you connect other tools to your office (for example, your accounting): your directors read the information you give them access to, one integration at a time and only with your permission. You can revoke each permission at any time. That information is used only to work for you.
We do NOT collect:
- Passwords (we never store them; Slack handles authentication)
- Payment information directly (when we start charging, payments will go through a payment provider, which we will list here)
- Your browsing behavior on third-party sites
3.How we use your data
- To provide the service and respond to your inquiries
- To manage the waitlist and tell you when we open
- To improve the product through aggregate analytics (e.g., how many people use each director)
- To send transactional emails (for example, account notifications)
- To measure our campaigns (see section 9)
- To keep the service secure, prevent abuse, fix bugs and comply with the law
Legal bases (if you are in the EEA or the UK): we process your data to provide the service you asked for (contract), for our legitimate interests (security, improving the product, measuring our campaigns), with your consent where the law requires it, and to comply with legal obligations.
4.AI and your data
- We do not use your data to train AI models — ours or anyone else's.
- You decide. Your directors give you recommendations; the decisions are yours. We do not use AI to make decisions about you that have legal or similarly significant effects.
- Nothing goes out in your name without your yes. If your directors prepare something to send or publish on your behalf, it goes out only with your explicit approval, one send at a time, and you see exactly what will go out. If you don't answer, nothing is sent.
5.Who we share data with
To make AI Office work, we work with these subprocessors:
- Anthropic — processes the AI directors' responses. Messages you send to the directors are sent to Anthropic for inference. Anthropic does not train on data sent through their API.
- Cloudflare — hosting infrastructure (Workers, D1 database, KV cache, R2 storage) and our website.
- GitHub — stores your office's repository (the files generated in your office).
- Slack — the platform itself, where the bot lives.
- Resend — sends our transactional emails.
- Tally — our waitlist form. It receives and stores your answers when you join the waitlist, in the European Union.
None of these providers are authorized to use your data for purposes outside of providing the service to you. If we use analytics or advertising tools on our website, they are described in section 9.
We also share information when the law requires it (for example, a valid court order), to protect the rights and safety of our users or others, or if Orama LLC is involved in a merger, acquisition or sale of assets. In that case this policy keeps applying to your data, and we will tell you before it changes hands. We never sell your personal information.
6.Your data is yours
You own the content you generate inside AI Office. Your office's repository in GitHub is yours; we maintain it operationally, but the files (decisions, plans, models) are your property.
You can request export, correction, or deletion of your data at any time by writing to hello@fillingthegap.tech.
7.How long we keep data
- Waitlist: until you ask us to delete it, or up to 12 months after we open if you don't become a customer.
- Your office's files and conversations: they live in your office's repository for as long as you keep them. They are your office's memory.
- Your account: while it is active. If you delete it, you have 30 days to ask us for a copy of your data, and we deliver it in a commonly used format. We delete your data from our active systems within 30 days of your request; our providers' backup copies are deleted automatically within 90 days.
- System logs: we keep system activity logs for security, and we delete them after 12 months.
8.Security
- Your data is encrypted in transit (TLS 1.2+) and at rest by our infrastructure providers (Cloudflare and GitHub)
- Slack tokens are stored encrypted (AES-256-GCM) in our credential vault, and each office can only reach its own. API keys, our GitHub keys and the system's other secrets are stored as encrypted secrets in Cloudflare
- We give each system and each person only the access they need: the bot enters your office's repository with a permission that opens only that repository and lasts at most one hour. We keep tightening it as the service grows
- Every request is tied to a single office. If the system detects an access across offices, it stops and alerts us
If a security breach affects your personal data, we will notify you, and the authorities where required, as the law requires. No system is 100% secure: if you become aware of a vulnerability, write to hello@fillingthegap.tech.
9.Advertising, cookies and tracking
Inside your office. Nothing from your office — your Slack messages, your connected tools, your conversations with your directors — is ever shared with advertising platforms or used to target ads. This does not change.
On our website and promotional pages. We may use analytics and advertising tools, including pixels and similar technologies from advertising platforms such as Meta, Google and LinkedIn, to measure our campaigns, understand which ones bring people to us, and show our ads to people who may be interested. We also learn which campaign brought you from the link you clicked. Where the law requires it, we ask for your consent before these tools run, and you can withdraw it at any time. We never sell your personal information.
This website also stores your language preference in your browser (localStorage), Cloudflare counts visits without cookies, and our typeface is loaded from Google Fonts, which receives your IP address when the page loads. When you open our waitlist form, Tally receives your IP address and your browser's information, even if you don't sign up.
10.International transfers
Orama LLC is based in the United States. Your data is processed in the United States and in the locations of our subprocessors (which include the United States, Europe, and other regions).
11.Your rights
Depending on where you live, you may have the following rights regarding your data:
- Access — request a copy of the data we have about you
- Correction — request that we update inaccurate data
- Deletion — request that we delete your data
- Portability — request your data in a machine-readable format
- Objection and withdrawal of consent — object to certain processing, or withdraw a consent you gave
- EEA and UK: you can also lodge a complaint with your data protection authority.
- California: you have the right to know, delete and correct your personal information, and not to be discriminated against for exercising your rights. We do not sell your personal information. If we ever share it for cross-context behavioral advertising, we will offer a "Do Not Sell or Share" option before doing so, and we honor Global Privacy Control signals.
- Colombia: you have the rights of Law 1581 of 2012 — to know, update, correct and delete your data, and to revoke your authorization — and you can file a complaint with the Superintendencia de Industria y Comercio.
To exercise any of these rights, write to hello@fillingthegap.tech. We respond within 30 days, or sooner where the law requires it.
12.Children
Our service is not directed to anyone under the age of 18. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us and we'll delete it.
13.Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email and post a notice on the service. The "Last updated" date at the top of this page reflects the most recent change.
14.Contact
Questions, requests, or concerns: hello@fillingthegap.tech. Orama LLC, Delaware, USA.