Privacy Policy

What we collect

Account details: your name, your email address and a hashed form of your password (never the password itself), plus your workspaces, their members and invitations.

Your content: the products you add, including details read from a product page you ask us to import, the pictures and videos you upload, and the images and videos the Service makes.

Billing details: your plan, credit balance and purchase history. Stripe handles payments; we receive a customer reference and the status of your payments, never your full card number.

Technical details: your IP address and request details, used to protect sign-in and limit abuse, and error reports when something breaks. Passwords, tokens, cookies and request bodies are removed from error reports before they leave the app.

How we use it

We use this information to run the Service: to sign you in, make the generations you ask for, store and deliver your results, take payments and keep your credit balance. We also use it to keep the Service secure, to find and fix errors, to answer you when you write to us, and to keep the records the law requires, such as tax and accounting records.

We do not sell your personal information, we do not use it for advertising, and we do not use your content to train AI models. Where the GDPR or a similar law applies, we rely on our contract with you, our legitimate interest in a secure and working Service, and our legal duties.

Who we share it with

We share information only with the providers that help us run the Service, and only what each one needs: fal.ai runs the AI models and receives the inputs of each generation; Firecrawl reads a product page when you ask us to import one; Stripe processes payments; Cloudflare stores your uploads and results; our hosting provider runs our servers and database.

We may also disclose information when the law requires it, to protect our rights or someone's safety, or as part of a merger or sale of our business, in which case this policy keeps applying to it.

Cookies and browser storage

We use only what the Service needs to work: a secure cookie that keeps you signed in and that page scripts cannot read, a cookie that remembers your language, and one that remembers whether the sidebar is open. Your browser also keeps the workspace you last opened and the run in progress. We use no advertising or analytics cookies.

How long we keep it

We keep your account and content while your account is open. You can delete products and finished runs yourself at any time. When you ask us to close your account, we delete its personal information and content within 30 days, except billing records the law requires us to keep, usually for up to seven years. Security logs and error reports are deleted after a limited time.

Your rights

You can see and change most of your information in the Service. You can also ask us for a copy of your personal information, ask us to correct or delete it, or object to how we use it, by writing to contact@orbivo.net. We answer within 30 days.

Depending on where you live, including the European Union, the United Kingdom, Turkey and some US states, you may have further rights, and you can complain to your local data protection authority.

Where we process it

We are based in the United States, and our providers may process information in the United States and other countries. Where the law requires it, these transfers rely on safeguards such as the Standard Contractual Clauses of the European Commission.

Security

We protect your information with encryption in transit, hashed passwords, short-lived sign-in tokens and access limited to what each part of the Service needs. No system is perfectly secure; if you find a weakness, tell us at contact@orbivo.net.

Children

The Service is not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.

Changes to this policy

We may update this policy. The date at the top shows the current version, and we will tell you about a material change in the Service or by email before it takes effect.