Back to Home

Privacy Policy

Last updated: March 24, 2026

ORVIA Booking ("ORVIA," "we," "us," or "our") is committed to protecting the privacy of our users and their customers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

We collect information that you provide directly to us:

  • Account Information: Name, email address, phone number, business name, and payment information when you create an account.
  • Business Data: Services, staff details, locations, business hours, and policies you configure in the platform.
  • Knowledge Base Content: Documents, FAQs, and other materials you upload to train the AI.
  • Customer Data: Information about your customers collected through booking interactions, including names, contact details, and appointment records.
  • Conversation Data: Messages exchanged between your customers and the AI across all channels (website widget, WhatsApp, voice).

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the ORVIA platform
  • Process bookings and send appointment-related communications (confirmations, reminders, follow-ups)
  • Power the AI knowledge base to answer customer questions accurately
  • Process billing and subscription management
  • Provide customer support and respond to inquiries
  • Analyze usage to improve our services

3. Data Sharing

We do not sell your personal information. We may share your data with:

  • Service Providers: Third-party vendors who help us operate the platform (hosting, email delivery, AI processing).
  • Channel Partners: Meta (WhatsApp Business API) when you connect your WhatsApp channel.
  • Legal Requirements: When required by law, regulation, or legal process.

4. Data Security

We implement industry-standard security measures to protect your data:

  • All data is transmitted over encrypted connections (HTTPS/TLS)
  • Session-based authentication with httpOnly cookies
  • Multi-tenant data isolation — your workspace data is strictly separated from other businesses
  • Prompt injection prevention to protect AI interactions
  • Regular security reviews and updates

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Request data portability

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies without your consent.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at support@orvia.dev.