Privacy Policy

Effective Date: March 28, 2026
Last Updated: April 13, 2026

1. Introduction

Welcome to Orovai (“we”, “us”, or “our”). We are committed to protecting your privacy and handling your personal information in a transparent and secure manner.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website and services (the “Services”).

By using our Services, you agree to the terms of this Privacy Policy.

2. Information We Collect

We may collect the following types of information:

2.1 Information You Provide

• Name, email address, and contact details
• Account registration information
• Billing and payment-related information (processed via third-party providers)
• Any data you submit through our Services

2.2 Automatically Collected Information

• IP address
• Browser type and device information
• Usage data (pages visited, actions taken)
• Log files and diagnostic data

2.3 Service Data

When you use our APIs or services, we may process:

• Input data submitted to the service
• Output data generated by the service

We do not use this data for purposes other than providing and improving the Services unless explicitly stated.

3. How We Use Information

We use collected information to:

• Provide, operate, and maintain our Services
• Improve functionality and user experience
• Process transactions and manage billing
• Communicate with users (support, updates, notifications)
• Monitor usage and detect abuse or fraud
• Comply with legal obligations

4. Legal Basis for Processing (Where Applicable)

Depending on your jurisdiction, we process personal information based on:

• Your consent
• Performance of a contract
• Legitimate business interests
• Legal obligations

5. Sharing of Information

We do not sell your personal information.

We may share information with:

• Service providers (hosting, payment processors, analytics)
• Infrastructure providers (cloud hosting, storage)
• Legal authorities when required or permitted by applicable law, including PIPEDA and Quebec privacy legislation

All third parties are expected to handle your data securely and in accordance with applicable laws.

5a. Law Enforcement and Abuse Disclosure

Orovai logs information associated with all API requests, including IP addresses, API keys, requested URLs, timestamps, and other relevant metadata. These logs are retained for a minimum of twelve (12) months.

In cases of suspected illegal activity, abuse of the Services, or violation of our Terms of Service, Orovai may disclose your personal information — including your IP address, account details, and request logs — to law enforcement agencies, regulatory bodies, or other authorized parties, as required or permitted by applicable law, including:

• The Personal Information Protection and Electronic Documents Act (PIPEDA), including sections 7(3)(c.1) and 7(3)(d)
• Quebec’s Act respecting the protection of personal information in the private sector (Law 25)
• The Criminal Code of Canada, including mandatory reporting obligations
• Any valid court order, warrant, or subpoena

Orovai cooperates fully with law enforcement investigations. Disclosure will be limited to information that is reasonably necessary for the purpose of the investigation, consistent with the principle of proportionality under Canadian privacy law.

6. Data Retention

We retain information only as long as necessary to:

• Provide the Services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

Data may be deleted or anonymized when no longer required.

7. Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect your information.

However, no system is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your information may be stored or processed in countries outside your jurisdiction.

By using our Services, you consent to such transfers, subject to appropriate safeguards where required.

9. Your Rights

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent

To exercise these rights, contact us at: support@orovai.com

10. Cookies and Tracking Technologies

We may use cookies and similar technologies to:

• Improve user experience
• Analyze usage patterns
• Maintain session information

You can control cookies through your browser settings.

11. Third-Party Services

Our Services may contain links to third-party websites or services.

We are not responsible for the privacy practices of those third parties.

12. Children’s Privacy

Our Services are not intended for individuals under the age of 13 (or applicable age in your jurisdiction).

We do not knowingly collect personal information from children.

13. AI and Automated Processing

Some features of our Services may involve automated processing or AI-based analysis.

• We do not use customer data to train models unless explicitly stated.
• Processing is performed solely to deliver the requested functionality.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

Changes will be posted on this page with an updated “Last Updated” date.

15. Contact Us

If you have any questions about this Privacy Policy, please contact:

Orovai
Email: support@orovai.com
Quebec, Canada