Privacy Policy

1. Information We Collect

Information you provide

• Account details: when you register, we collect your name, email address and a password (stored only as a secure hash).
• Order details: when you place an order, we record the service chosen, the amount, the payment method used, and the Order and Invoice IDs.
• Support communications: any information you choose to share with us via email, WhatsApp or Discord when requesting support.

Information collected automatically

• basic technical data such as IP address, browser type and pages visited, used to operate and secure the website;
• preferences such as theme and language selection, stored locally in your browser.

2. How We Use Your Information

• to create and manage your account and provide access to the Client Area;
• to process, verify and activate your orders;
• to send important service communications, such as account verification emails and order status updates;
• to provide customer support through email, WhatsApp and Discord;
• to improve our services using aggregated, non-identifying information;
• to detect, prevent and address fraud, abuse and security threats.

3. Legal Basis for Processing

We process your personal information on the following legal bases under applicable data protection law:

• Contract: processing required to deliver the Services you have ordered or registered for;
• Legitimate interests: operating, securing and improving our website and Services;
• Legal obligation: where we must retain records to comply with Indian legal, tax or regulatory requirements;
• Consent: where you have opted in to specific communications, which you may withdraw at any time.

4. Cookies and Local Storage

Our website uses cookies and browser local storage to:

• keep you logged in between visits;
• protect forms from CSRF (cross-site request forgery) attacks;
• remember your theme and language preferences; and
• show the cart badge with your selected items.

We do not use tracking cookies to build advertising profiles. You can clear cookies and local storage at any time through your browser settings, but doing so may log you out or reset your preferences.

5. Sharing of Information

We do not sell your personal information. We share only the minimum necessary data with:

• Email providers — to deliver account verification and order emails;
• Payment partners — to process transactions that you initiate;
• Hosting infrastructure providers — to operate the servers on which our Services run.

We may disclose personal information if required by law or in order to protect our legal rights, the safety of our users, or the security of our systems.

6. Data Security

We take reasonable technical and organisational measures to protect your information, including:

• passwords stored only as one-way hashes;
• sessions protected with HttpOnly and Secure cookies and CSRF tokens;
• server secrets (such as SMTP credentials) kept in server-side environment variables, never in website files;
• restricted access to production data.

While no method of transmission over the internet is completely secure, we work to protect your data using industry-standard practices.

7. Data Retention

We retain account and order records while your account is active and for as long as needed to fulfil our legal and tax obligations. Technical logs are retained for a limited period for security purposes. You may request deletion of your account and related data at any time by contacting us.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate details — most information can be updated directly from your Client Area;
• Request deletion of your account and personal data;
• Object to or restrict certain processing;
• Withdraw consent for any communications you previously opted in to.

To exercise any of these rights, email us at [email protected] and we will respond within a reasonable timeframe.

9. Children’s Privacy

Our Services are intended for users who are at least 18 years old, or minors who have obtained parental or guardian consent. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

If we change this Privacy Policy, we will update the effective date shown above. Significant changes will be communicated by email where we have your contact details. The current version will always be available at orvixcloud.site/privacy.

11. Contact

If you have any questions about this Privacy Policy or how your data is handled, email us at [email protected] or open a ticket in our Discord community.