Privacy Policy

From Business Owners

When you create an Orevia account and use the platform, we collect:

• →Account information — your name, email address, and password (stored securely)
• →Business information — business name, location slug, Google review URL, and reply email address
• →Customer data you submit — names, phone numbers, and email addresses of your customers that you enter into the platform to send review requests
• →Usage data — logs of review requests sent, delivery statuses, and star-rating outcomes
• →Feedback data — private feedback submitted by your customers through the platform's feedback form, stored in your dashboard

From End Recipients (Customers)

When a customer receives and interacts with a review request, we may collect:

• →Star rating selection — which rating option the customer chose
• →Feedback content — written feedback submitted voluntarily through the private feedback form
• →Interaction metadata — timestamps and basic interaction data (e.g., whether the message was clicked)

Automatically Collected Data

• →IP addresses and basic browser/device information when using the rating page
• →Cookies and session tokens required for platform functionality
• →SMS and email delivery status reports from our messaging providers

We use the information we collect for the following purposes:

• →To create and manage your Orevia account and authenticate your identity
• →To send branded SMS and email review request messages to your customers on your behalf
• →To display review request history, delivery logs, and customer feedback in your dashboard
• →To generate and deliver QR code assets linked to your review page
• →To maintain platform security, prevent fraud, and ensure compliance with applicable laws
• →To improve the performance, reliability, and features of the Service
• →To respond to support inquiries and communicate service-related updates

We do not use your data or your customers' data for advertising, profiling, or any purpose unrelated to operating the Service.

We share data only with trusted third-party providers that are essential to delivering the Service. Each provider is contractually bound to protect your data and may not use it for their own purposes.

We do not sell, rent, or trade any personal information to third parties for marketing or commercial purposes — ever.

Orevia sends SMS messages on behalf of Business Owners using Twilio, in compliance with the TCPA (Telephone Consumer Protection Act) and carrier A2P 10DLC regulations.

• →SMS messages are sent from a registered business number under Orevia's A2P 10DLC campaign
• →All messages include the business name as the sender context
• →End Recipients may opt out of future SMS messages at any time by replying STOP
• →Email recipients may opt out by replying to the message or contacting us directly
• →Opt-out requests are honored promptly and the relevant contact information is suppressed from future sends

We retain your information for as long as necessary to provide the Service:

• →Account data — retained for the lifetime of your account. Deleted within 30 days of account closure upon written request.
• →Customer contact records — retained while your account is active to support delivery logs and history. Deleted with your account.
• →Feedback data — retained in your dashboard until you delete it or your account is closed.
• →SMS/email delivery logs — retained for up to 12 months for compliance and troubleshooting purposes.
• →Opt-out records — retained indefinitely to honor suppression requests.

Depending on your location, you may have the following rights regarding your personal information:

For Business Owners

• →Access — request a copy of the personal data we hold about you
• →Correction — update inaccurate or incomplete information via your account settings
• →Deletion — request deletion of your account and associated data
• →Portability — request an export of your data in a machine-readable format
• →Restriction — request that we limit processing of your data in certain circumstances

For End Recipients (Customers)

• →Opt out of SMS — reply STOP to any message to be immediately removed from future sends
• →Opt out of email — reply to any email or contact us at the address below
• →Deletion request — contact us to request removal of your contact information from our systems

To exercise any of these rights, contact us at orevia.security@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request.

We take the security of your information seriously and implement appropriate technical and organizational measures to protect it, including:

• →Encrypted data storage and transmission (TLS/SSL)
• →Secure authentication with hashed password storage — we never store passwords in plain text
• →Access controls limiting who within our team can access platform data
• →Regular monitoring for unauthorized access or anomalous activity

No method of transmission or storage over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify affected users as required by applicable law.

Orevia uses only strictly necessary cookies and session tokens required to operate the platform — for example, to keep you logged in to your dashboard. We do not use advertising cookies, third-party tracking pixels, or behavioral analytics tools.

You may disable cookies in your browser settings, but doing so may impair your ability to log in or use certain features of the platform.

The Orevia platform is intended solely for use by business owners and adults. We do not knowingly collect personal information from anyone under the age of 13. If you believe a minor has provided us with personal information, please contact us immediately and we will delete it.

Orevia is operated primarily for businesses in the United States. If you are accessing the Service from outside the US, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

By using the Service, you consent to this transfer. We take steps to ensure your data receives an adequate level of protection regardless of where it is processed.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify Business Owners via email.

Continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us:

• →Email: orevia.security@gmail.com
• →Website: orevia.app

We are committed to resolving any privacy concerns promptly and transparently.