Privacy Policy
Last updated: February 2026
Overview
Orvyx is a context-first AI content workspace. This policy explains what information Orvyx collects, why it is collected, and how it is used.
Information Orvyx collects
Account information
Email address and display name, collected during signup. Used to authenticate you and communicate service-related updates.
Creator Context
Your preferred name, role, what you are building, audience description, goals, voice attributes, style rules, banned phrases, and approved public links. You provide this voluntarily during onboarding or through Settings. Used to shape AI-generated content to match your voice and direction.
Project information
Project titles, descriptions, niche, target audience, platforms, and content goals. Used to organize your content and provide context for AI generation.
Generated content
The prompts you submit and the outputs Orvyx generates (content plans, scripts, captions, and other drafts). Stored in your project so you can review, edit, and reuse them.
Security telemetry
IP address, timestamps, request/event IDs, limited user-agent information, and approximate geolocation (country or country-city level). Collected for security purposes: login protection, rate limiting, fraud prevention, and abuse investigation. Orvyx does not collect precise location data.
Usage and billing data
Generation counts, feature usage, and plan information for billing and plan enforcement. Payment details are processed by Stripe; Orvyx does not store full payment card details.
AI processing
Orvyx may use third-party AI service providers to process requests needed to generate requested outputs. When you submit a prompt, the relevant context and brief are sent to the selected AI provider for processing. The providers Orvyx currently uses include Google (Gemini) and Hugging Face. Orvyx does not use your content to train third-party AI models.
Data retention
Your content, projects, and Creator Context are retained for as long as your account is active. Security telemetry logs are retained for up to 365 days, after which they are automatically purged. AI security logs are retained for up to 90 days.
Data deletion and export
You may request deletion of your account and associated data by contacting us. You may also export your content at any time through the platform's export features. Upon deletion, content is removed within 30 days.
Data sharing
Orvyx shares data only with the subprocessors needed to operate the service: Supabase (database and authentication), Vercel (hosting), Stripe (payments), and the AI providers listed above. Orvyx does not sell personal data.
Security
Orvyx uses row-level security to ensure your data is accessible only to you. Security telemetry is collected to detect and prevent unauthorized access. If you believe your account has been compromised, contact us immediately.
Contact
For privacy inquiries, contact Development@orvyx.io.
This policy may be updated. Continued use of Orvyx after changes constitutes acceptance of the updated policy.