Last updated: 7 October 2026
Zeratheon Foundation Company Limited (“Zeratheon”, “we”, “us”) builds and
distributes (H.E.R.O.S): Ordis, an AI agent system for Windows, and
operates the website at zeratheonfoundation.com. This policy explains what personal
data we collect, why we collect it, where it goes, and what you can ask us to do
with it.
We have tried to write this in plain language. If anything is unclear, email us
and we will explain it.
1. Who is responsible for your data
Zeratheon Foundation Company Limited is the data controller for the
personal data described in this policy. That means we decide why and how it is used,
and we are the ones you contact about it.
Contact: zeratheonfoundation@gmail.com
2. What we collect, and why
2.1 When you use the contact form
We collect the name, email address, subject
and message you enter. We use these only to read your message and reply to
you. The lawful basis is our legitimate interest in answering people who contact us, and
— where you are asking us to do something — taking steps at your request before any
agreement.
We also use two anti-spam checks: a hidden field that only automated bots fill in, and
a timing check that rejects submissions made impossibly fast. Neither collects personal
data about you.
2.2 When you use the Ordis application
Ordis is designed local-first. This is the part most people care about,
so we are precise about it:
- Your files, your memory and your session history stay on your own computer.
We do not receive them, and we cannot read them. - The text of what you ask Ordis is sent to a third-party AI model provider
so that it can generate a reply. That provider is currently DeepSeek
(DeepSeek Open Platform). This is a transfer of your prompt text to a company outside
Myanmar. We disclose it because you have a right to know it happens. Do not send secrets,
passwords, or other people’s personal data in a prompt. - Ordis may use your computer’s microphone, screen, camera or files only when you
ask it to perform a task that needs them. Those inputs are processed on your machine.
2.3 When you visit this website
Like almost every website, our server records basic technical information when you
load a page — for example your IP address, the time, and which page you requested. We use
this to keep the site working and to spot abuse. See our Cookie Notice
for the cookies we set.
2.4 Licence keys
Ordis asks for a licence key on first run. When you activate one, we record that the key
is in use so it cannot be shared beyond the number of devices it allows. We do not use this
to track what you do inside the application.
3. What we do NOT do
- We do not sell your personal data.
- We do not read your files, your memory, or your session history.
- We do not upload your documents anywhere as part of normal use.
- We do not run advertising trackers on this website.
- We do not knowingly collect data from children under 13. If you believe a
child has sent us personal data, contact us and we will delete it.
4. Who else sees your data
We share personal data only with the service providers we need in order to operate:
- Our hosting provider — stores this website and its database.
- DeepSeek — receives the text of prompts you send through the Ordis
application, in order to generate replies. - Our email provider — carries messages you send us through the contact form
and messages we send you in reply. - Download hosting — serves the installer file when you download it. Our
current download host does not require an account and does not receive your email address.
We may also disclose data if we are legally required to, or to protect the rights and
safety of our users or the public.
5. How long we keep it
- Contact form messages — kept while we deal with your enquiry and for a
reasonable period afterwards so we have a record of what was said, then deleted. - Server logs — kept for a short period for security purposes, then rotated.
- Licence activation records — kept while the licence is active.
If you want a specific message deleted sooner, ask us and we will remove it.
6. Your rights
Depending on where you live, you may have the right to:
- ask what personal data we hold about you, and receive a copy;
- ask us to correct data that is wrong;
- ask us to delete data we no longer need;
- object to, or ask us to restrict, certain processing;
- ask us to transfer your data to another service;
- complain to your local data protection authority.
To use any of these, email zeratheonfoundation@gmail.com.
We will respond within a reasonable period and will tell you if we need more information to
find your records.
7. Security
We take reasonable technical and organisational steps to protect the data we hold,
including encrypted connections (HTTPS) to this website and restricted access to our
systems. No method of transmission or storage is perfectly secure, and we cannot promise
absolute security.
8. International transfers
Your prompt text is processed by DeepSeek, which operates outside Myanmar. This means
your data may be handled under the laws of another country. By using the AI features you
accept this transfer. If you do not want your prompt text to leave your country, do not use
those features.
9. Changes to this policy
We may update this policy as the product changes. The “Last updated” date at the top will
change when we do. Material changes will be noted on this page.
10. Contact
Zeratheon Foundation Company Limited
Myanmar
Email: zeratheonfoundation@gmail.com