Privacy Policy

This policy explains the main categories of personal and business information processed through the Orvix website and platform. Contract-specific data-processing obligations may also be addressed in the applicable subscription agreement and Data Processing Agreement.

Information we collect

Depending on how you use Orvix, we may process account and identity data, agency and workspace information, client and operational records entered by authorized users, billing and subscription references, support communications, form submissions, device and browser information, security logs and limited first-party website conversion events. Orvix does not request or store full payment-card details; Paddle processes payment information through its hosted services.

How we use information

Information is used to provide and secure the service, create and administer workspaces, enforce roles and tenant boundaries, deliver requested communications, process subscriptions, support customers, diagnose failures, maintain audit evidence, improve product usability and measure whether public commercial journeys work as intended.

Legal and operational basis

Processing may be necessary to perform a contract, respond to a request before entering a contract, protect the platform and its users, comply with applicable obligations, or pursue legitimate operational interests such as service reliability and fraud prevention. Where consent is required, it will be requested separately and may be withdrawn subject to applicable law.

Service providers and sharing

Orvix does not sell customer data. Information may be shared only as needed with authorized infrastructure, email-delivery, security, support and payment providers; professional advisers; or authorities where legally required. Providers are expected to process information only for the contracted service and under appropriate confidentiality and security obligations.

Cookies and technical measurement

Essential session and security technologies support authentication, CSRF protection and language preference. Limited first-party conversion records may include page, target, language, selected package, billing cycle and rotating hashed session or network identifiers. See the Cookie Policy for the current implementation and any future consent requirements.

Retention and deletion

Records are retained only for the period reasonably required to provide the service, maintain security and audit evidence, meet contractual or legal obligations and resolve disputes. Retention periods may differ by record type. Authorized deletion or account-closure requests are handled subject to backup cycles, legal holds and records that must be retained.

Security and access control

Orvix applies role-based access, workspace scoping, session and CSRF controls, audit logging, protected payment webhooks and other technical and organizational safeguards. No system can be guaranteed completely secure, so suspected unauthorized access should be reported immediately through the official support channels.

Your choices and requests

Subject to applicable law and contractual roles, you may request access, correction, deletion, restriction, export or objection concerning personal information. Workspace data requests may need to be submitted or approved by the relevant agency workspace owner because that organization controls the business records entered into Orvix.

Contact

Privacy and security questions may be submitted through the official support channel at support@orvixsuite.com.