Privacy Policy

1. Information we collect

Project inquiries. If you contact us through the site, we collect the name, business email, and project description you submit. You may also provide your company, requested service, budget range, target deadline, target platforms, reference links, reference files, and a preferred consultation window. Inquiry records and attached references are stored privately and are accessible only to authorized ORVEX Owner/Admin accounts.

Guest live chat. If you start a chat without an account, we collect the name and email address you enter and the messages in that conversation. The conversation is stored in a private inbox that only authorized ORVEX Owner/Admin staff can access. Team members and Clients cannot view guest chats.

Workspace accounts. To sign in, the workspace receives account identifiers such as your email address and, depending on your chosen sign-in method, your name from the authentication provider. Workspace access is assigned by ORVEX according to your role.

Project collaboration. When you use the workspace, it may process project details, tasks, messages, feedback or approvals, and files you or your team upload or share. Access to this information is limited by project membership and workspace role.

Payments and proposals. The workspace may display proposals, payment requests, payment status, and receipt information. PayPal processes checkout and payment credentials. ORVEX receives payment-related records needed to reconcile a payment and support your project.

Basic technical information. Our hosting and service providers may process technical information needed to deliver the site, prevent abuse, and troubleshoot errors. The workspace uses session storage in your browser for sign-in session tokens and to support resumable file uploads.

2. How we use information

We use information to respond to inquiries and guest chats, prepare proposals, provide and manage creative services, coordinate project work, provide secure workspace access, share files, process and reconcile payments, send project-related communications, and protect the site and workspace from misuse.

Guest chat may also show automated answers to common service questions. We use inquiry and chat contact details to reply to the conversation you started. We do not use them to subscribe you to unrelated marketing messages.

3. Service providers

ORVEX uses service providers to operate specific parts of the service. These include Supabase for authentication, database, hosting functions, and private project file storage; PayPal for checkout; Google services when Google sign-in or the Owner’s connected Google Drive is used; and providers that deliver email or other account and project communications. These providers process information as needed to provide their services, subject to their own terms and privacy notices.

Files up to 50 MiB are stored in private project storage. Larger project files may be stored in the private Google Drive connected by the ORVEX Owner. Project file access is intended for people authorized for that project.

4. Google sign-in and Drive

If you choose “Sign in with Google,” Google shares basic account information such as your name, email address, and profile identifier so the workspace can authenticate your account. Google’s use of that information is governed by Google’s Privacy Policy.

The ORVEX Owner may separately connect a Google Drive account for project file storage. This connection requests the Google Drive drive.file permission, which is limited to files created or opened by the ORVEX workspace. ORVEX uses it to create private project folders, upload larger project files, and retrieve those files for people authorized on the project. The connected account is the Owner’s; clients and team members do not need to connect their personal Drive accounts.

Google API data is used to provide this file-storage feature, not for advertising. The Drive refresh credential is stored encrypted for the integration. The Owner can revoke Google access in their Google Account permissions. Google’s use of data is also governed by Google’s Privacy Policy.

5. Storage, retention, and security

Information is retained for as long as reasonably needed to respond to inquiries and chats, administer accounts, deliver and document projects, reconcile payments, resolve disputes, and meet applicable recordkeeping obligations. Retention periods can vary with the type of information and the project. Some information may remain in routine backups for a limited period after it is removed from active systems.

We use access controls and private storage features intended to protect project information. No online service or transmission method can be guaranteed completely secure.

6. Your choices and requests

You can contact us to ask about, correct, or request deletion of personal information associated with you. We may need to keep certain records to complete a project, maintain payment records, protect the service, or meet legal obligations. We may also need to verify your identity before acting on a request.

You can stop using the workspace and sign out at any time. If you used Google sign-in, you can also manage the connection from your Google Account settings.

7. Children

The site and workspace are designed for professional creative services and are not directed to children.

8. Changes to this policy

We may update this policy when our services or practices change. The “Last updated” date above shows when the current version was published.