ORVO AI ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our Service at orvoai.app.
Account Information: When you register, we collect your name, email address, and password (stored as a bcrypt hash — we never store plain text passwords).
Website Monitoring Data: URLs you add for monitoring, health check results, response times, SSL certificate data, and uptime history.
Usage Data: Login timestamps, feature usage, and general analytics to improve the Service.
Payment Information: Payments are processed by Lemon Squeezy. We do not store your credit card details. Lemon Squeezy handles all payment data in accordance with PCI-DSS standards.
We use your information to: (a) provide and maintain the Service; (b) send monitoring alerts and notifications; (c) process payments and manage subscriptions; (d) improve the Service and develop new features; (e) communicate important updates about the Service.
Your data is stored on secure servers. We implement industry-standard security measures including encryption in transit (HTTPS/TLS), hashed passwords, and JWT-based authentication. While we strive to protect your data, no method of transmission over the Internet is 100% secure.
We do not sell, trade, or rent your personal information to third parties. We may share data with: (a) Lemon Squeezy for payment processing; (b) email service providers for sending alerts; (c) law enforcement if required by law.
If you create a public status page, the monitoring status of your selected websites will be publicly visible. No personal account information is displayed on public status pages.
We use minimal cookies and localStorage for authentication tokens and user preferences (language, theme). We do not use third-party tracking cookies or advertising cookies.
We retain your data for as long as your account is active. Monitoring history is retained based on your plan (14 days for Free, 30 days for Pro, 1 year for Team). If you delete your account, we will remove your personal data within 30 days.
You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your data; (d) export your data; (e) withdraw consent at any time. Contact us at [email protected] to exercise these rights.
The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.
For privacy-related questions, contact us at [email protected].