Legal

Privacy Policy

How we collect, use, store, and protect your data.

Welcome to Orvo. Your privacy is of the utmost importance to us. This Privacy Policy outlines how we collect, use, store, and protect your data, including Google user data, in accordance with GDPR, Google API policies, and other applicable privacy laws.

1. Information We Collect

To provide and enhance our services, we collect the following data:

  • Personal Information: Name, email address, and profile details.
  • Google Contacts Data: With your consent, we sync your Google Contacts into Orvo.
  • Authentication Information: Required for Google and Facebook login.
  • Billing Information: Managed securely via Stripe for subscription payments.
  • Usage Data: Logs and analytics to improve Orvo's functionality.

2. How We Use Your Data

We use your information to:

  • Provide contact management and Google Contacts sync within Orvo.
  • Authenticate users via Google and Facebook login.
  • Process payments securely using Stripe.
  • Enhance app performance and develop new features.
  • Provide customer support and resolve inquiries.

Note: Orvo personnel do not have access to users' private data.

3. Data Storage and Security

We securely store user data in GDPR-compliant data centers. Security measures include:

  • SSL Encryption: Secure data transmission.
  • Data Encryption: Protection for stored information.
  • Restricted Access: Ensuring only authorized personnel can handle data.

4. Data Sharing with Third Parties

We do not sell or share your data except in these cases:

  • Stripe: For secure payment processing.
  • Google & Facebook: For authentication and contact syncing.
  • Legal Compliance: If required by law or to protect our rights.

5. Compliance with Google API Policies

Orvo strictly follows the Google API Services User Data Policy:

  • Limited Use: We only access Google Contacts for syncing and do not use this data for marketing.
  • User Consent: We request explicit permission before accessing Google Contacts.
  • Data Control: You can revoke Orvo's access anytime via your Google Account settings.

6. User Rights

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data.
  • Correction: Modify or update your stored information.
  • Deletion: Request removal of your data.
  • Portability: Download your data in a structured format.

To exercise your rights, contact us at office@getorvo.com.

7. Data Retention

User data is retained for 30 days after account deletion, after which it is permanently erased.

8. Third-Party Data Stored by Users

Orvo allows users to store information about their professional contacts (names, notes, relationship details). Users are the data controllers for any personal data they enter about third parties and are responsible for ensuring they have a lawful basis to store it.

If you believe an Orvo user holds personal data about you that you would like corrected or removed, please contact us at office@getorvo.com. We will forward your request to the relevant user(s) in accordance with applicable data protection law.

9. Cookies and Tracking

Orvo uses the following cookies:

  • Essential cookies: Session cookies required for login and payment processing (Laravel session, Stripe). These are strictly necessary and do not require consent.
  • Analytics cookies: Google Analytics (_ga, _gid) to understand how visitors use Orvo. These are only loaded after you provide consent via our cookie banner. IP addresses are anonymised.

You can withdraw your consent at any time by clearing your browser's local storage or cookies. We do not use cookies for advertising or profiling.

10. Updates to This Privacy Policy

We may update this Privacy Policy periodically. Users will be notified via email or in-app alerts.

11. Contact Us

For inquiries regarding this Privacy Policy, contact us at:

Email: office@getorvo.com

By using Orvo, you agree to this Privacy Policy.