Legal

Privacy Policy

Last updated: June 14, 2026

This policy is a general template for ORVEXTA's services. It is provided for transparency and does not constitute legal advice. Consult qualified counsel for jurisdiction-specific requirements.

1. Introduction

ORVEXTA ("ORVEXTA", "we", "us", or "our") operates the website orvexta.com and the related AI website intelligence, SEO, content, and growth automation platform (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the rights you have over it. You can reach us at support@orvexta.com.

2. Information we collect

  • Account & profile data. Name, email address, hashed password, profile preferences, organization, and any details you submit during onboarding. Account data is stored in our managed backend infrastructure.
  • Scan inputs & reports. URLs you submit for analysis, publicly available page data fetched from those URLs, and the AI-generated insights, reports, scores, and recommendations we produce and associate with your account.
  • Usage analytics & cookies. Device, browser, IP address, pages visited, feature usage, performance telemetry, and cookies used for authentication sessions and product analytics.
  • Communications. Messages you send us through contact forms, email, or support channels.

3. How we use information

We use the information we collect to provide and operate the Service, run AI website scans and generate reports, authenticate users, process payments, communicate product updates and security notices, prevent abuse and fraud, comply with legal obligations, and improve the product.

4. AI processing

URLs and content you submit may be processed by third-party AI providers (such as OpenAI and the Lovable AI Gateway) under their respective data-processing terms in order to generate insights. We do not sell your scan data and we do not use your customer content to train public foundation models.

5. How we share information

We share information only with service providers that help us deliver the Service — hosting and database infrastructure, payment processing (Stripe), email delivery, analytics, and AI providers — under contractual confidentiality and data-protection obligations. We do not sell personal information. We may disclose information when required by law, to enforce our Terms, or to protect rights and safety.

6. Cookies & tracking

We use strictly necessary cookies for authentication, and analytics cookies to understand product usage. You can control cookies through your browser settings. Disabling necessary cookies will prevent you from signing in.

7. Data retention

We retain account and scan data for as long as your account is active. When you delete your account, we delete or anonymize associated personal data within a reasonable period, except where retention is required by law (for example, tax or accounting records).

8. Security

We protect your data using encryption in transit (TLS), encryption at rest where available, row-level security policies on our database, access controls, and regular review of permissions. No system is perfectly secure; we encourage strong, unique passwords.

9. International transfers

ORVEXTA operates globally. Your information may be processed in countries other than your own, including the United States and the European Union. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Your rights — EEA, UK & Switzerland (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, rectify, erase, restrict processing of, port, and object to processing of your personal data. You may also withdraw consent at any time and lodge a complaint with your local supervisory authority. Our legal bases for processing are: performance of a contract (providing the Service), legitimate interests (improving and securing the Service), consent (for optional marketing), and compliance with legal obligations.

11. Your rights — California (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion or correction, to opt out of "sale" or "sharing" of personal information (we do not sell or share personal information as defined by the CCPA), and to non-discrimination for exercising these rights. To exercise these rights, contact us at privacy@orvexta.com.

12. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here with a revised "Last updated" date and, for material changes, notify you by email.

14. Contact us

Privacy questions: privacy@orvexta.com. General support: support@orvexta.com.

See also our Terms of Service.