Use of customer data with Orchestrator

Purposes

We process the information used with our services for the following purposes:

• Provide our services

Provide our services

We process the following customer data to deliver our services:

• User configuration - any settings or configurations set by the customer on the Orchestrator for their specific needs.

• Transactional data - details related to the tasks performed by the users or robots, including time stamps, outcomes, and error logs.

• Workflows and automation details - details about the robots, processes, packages, environments, and schedule information.

We process telemetry data such as usage data, session duration, feature usage etc. to make sure that our platforms operate smoothly and to optimize the user experience based on the feedback and usage patterns we observe. We use data analytics to measure and evaluate the performance of our services.

We process account information, such as user IDs and login information, in order to provide you with access to the services and to secure your account.

We may process data that you send to us for support or as necessary for troubleshooting issues, in accordance with our Support terms.

Customers can limit the data they input into UiPath Orchestrator or they can configure their system settings to manage the data retention period, ensuring that data is not stored in the system for longer than necessary. For more information regarding the use of Orchestrator, refer to Orchestrator - Introduction.

Data storage

Data is stored when using this product as selected by you and in accordance with our data residency page, available at Automation Cloud - Data residency.

Safeguards

We employ the following safeguards in achieving the purposes described above:

• Role-Based Access Control (RBAC) - administrators can assign specific permissions to individual users or groups based on their roles and responsibilities, thereby minimizing unauthorized access.
• Customer data is encrypted. Access is strictly limited, and any access is logged and audited.
• Customer data is deleted at contract termination or upon request.