Clear about what we collect.
Careful about what we keep.
This Privacy Policy explains what Orveil collects, how we use it, when we share it, and the choices you have. We wrote it to be readable, but it is still a legal document and forms part of how the Service works.
We collect the information we need to run Orveil, secure accounts, deliver galleries, and support the product. We do not sell personal data. You keep ownership of the files you upload. We use service providers like Supabase, Vercel, Google, Stripe, and our email provider to operate the Service.
1. Scope and contact
This Policy applies to Orveil and the related services we make available through orveil.studio. In this Policy, “Orveil,” “we,” “us,” and “our” refer to the operator of the Service. “You” refers to the person or business using the Service.
2. Information we collect
We collect information directly from you, automatically when you use the Service, and from the providers you choose to use with Orveil.
- Account information such as your email address, password hash, profile name, avatar, and account metadata.
- Project and gallery information such as project names, descriptions, uploads, branding assets, delivery copy, collaboration settings, and gallery customization choices.
- Client delivery information such as client email addresses and delivery records when you send galleries through Orveil.
- Billing information for paid plans, such as your subscription tier, billing status, and a payment-provider customer reference. Card details are entered with and processed by our payment provider, Stripe — Orveil does not store full card numbers.
- Usage and device information such as IP address, browser, operating system, session timing, and product interaction events used to run, secure, and improve the Service.
- Authentication information from providers such as Google when you choose OAuth sign-in.
3. How we use information
- To create and manage accounts.
- To host, process, display, and deliver your galleries and files.
- To send account, security, invite, and delivery-related emails.
- To diagnose bugs, prevent abuse, secure the Service, and enforce our Terms.
- To improve the Service using aggregated or de-identified usage patterns.
We do not use your uploaded creative work for advertising or AI training without your separate permission.
4. How we share information
We do not sell personal information. We share information only when needed to operate the Service, comply with law, or complete a request you initiate.
- With infrastructure and service providers such as Supabase (database and storage), Vercel (hosting), Google (authentication when used), Stripe (payment processing for paid plans), and our email provider for transactional delivery.
- With your intended recipients when you send a gallery or invite through Orveil.
- When required by law, legal process, or to protect the security, rights, or safety of Orveil, our users, or others.
- In connection with a merger, acquisition, financing, or sale of all or part of the business, subject to appropriate notice where required.
5. Storage, security, and retention
We use reasonable technical and organizational safeguards designed to protect personal information, including encrypted transport, access controls, and managed infrastructure. No service can promise absolute security.
- Account information is retained while your account is active and for a limited period after deletion where needed for security, recovery, or legal obligations.
- Uploaded files and project data are retained until you delete them or your account is deleted, subject to short operational backup windows.
- Usage logs and delivery records are retained only as long as reasonably needed for operations, security, analytics, and legal compliance.
6. Your choices and rights
Depending on where you live, you may have rights to access, correct, export, delete, or restrict certain personal information. You may also object to certain processing or withdraw consent where consent is the basis for processing.
To make a request, email hello@orveil.studio. We may need to verify your identity before we complete a request.
7. Cookies and similar technologies
Orveil uses necessary technologies such as session and preference storage to keep you signed in and remember settings. If we add optional analytics or advertising technologies later, we will update this Policy accordingly.
8. Children’s privacy
Orveil is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will investigate and take appropriate action.
9. International users
Orveil may be hosted or operated using providers located in the United States. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in the United States and other jurisdictions where our providers operate.
10. Changes to this Policy
We may update this Policy from time to time. If we make a material change, we will update the effective date and provide notice through the Service or by email where appropriate. Your continued use of Orveil after the updated Policy takes effect means the updated Policy applies going forward.