Privacy Policy

Who is responsible for your data

Orvylio publishes this service and decides how the data described here is used. For any question about your data, write to [email protected].

Data about your account

When you create an account or accept an invitation, we store:

• your name and your email address;
• your password, kept only in a hashed form that we cannot read;
• the language you chose for the interface and for our emails;
• the name of your workspace, your role in it and the members of your team;
• the email addresses of the people you invite to your workspace.

Data about your use of Orvylio

We store what you do in the application so that you and your team can find it again:

• your searches: the sentence you typed, the criteria, and what you sell when you tell us;
• the businesses your workspace has unlocked and the enrichments it has asked for;
• your lists, and the status and the notes you give to each business;
• the history of your credits: purchases, unlocks, searches and returned credits.

Our servers also process your IP address to keep the service secure, for example to limit repeated sign-in attempts.

Payment data

Card payments are handled by Stripe and, in Côte d’Ivoire, mobile money payments by Paystack. You enter your card or mobile money details on their payment pages: Orvylio never sees or stores your card number or your mobile money PIN.

We keep a record of each order: the pack, the amount, the currency, the state of the payment and its reference at the payment provider.

What we use your data for

• to provide the service: run your searches, show your results and keep your lists;
• to sell credits and keep an exact record of them;
• to send you the emails the service needs: address verification, password reset and invitations;
• to protect accounts and prevent abuse;
• to measure how the service works and improve it.

We do not sell your data and we do not use it for advertising.

Who receives data

The members of your workspace see its searches, its unlocked businesses, its lists, its notes and its credit history.

Orvylio also relies on service providers. Each one receives only what its task requires:

• Apify collects public business listings. It receives the activity and the place of a search.
• Stripe processes card payments. It receives your email address, the amount and the reference of your order.
• Paystack processes mobile money payments in Côte d’Ivoire. It receives your email address, the amount and the reference of your order.
• OpenAI helps us understand your search sentence and what you sell, and reads web search results during an enrichment. It receives that sentence, that description and extracts of those results.
• Serper runs the web searches of an enrichment. It receives the name and the place of the business being enriched.
• Our email delivery provider sends our emails. It receives your email address and the content of the email.
• Our hosting provider runs our servers and our database, where the data described on this page is stored.
• Cloudflare protects the site and carries its traffic. It processes your IP address and the requests your browser sends.

Some of these providers process data outside your country. We share data with them only to run Orvylio, and with the authorities when the law requires it.

Data about the businesses shown in results

Orvylio gathers information that businesses publish about themselves on public sources, such as their Google Maps listing or their business Facebook page: name, activity, address, phone number, website, rating, number of reviews and links to their public pages.

When a member asks for an enrichment, Orvylio also searches the web for the email addresses, the social pages and the website of the business, and for the name of its manager when a public page gives it.

Orvylio lists businesses, not private individuals.

If your business is listed, you can ask us to correct its information or to remove it on the removal and correction request page. A removed business no longer appears in results, including after later collections. To handle your request, we keep your name, your email address and your message.

Audience measurement

We count visits to the public pages of the site (home page, legal pages, removal request page) with Umami, a tool we host ourselves. It uses no cookie, does not follow you from one site to another and respects the “Do Not Track” setting of your browser. The pages where you type a password and the application itself are not measured.

Cookies

Orvylio only uses the cookies it needs to work: one keeps you signed in, one protects your actions against forgery, and one may remember your language. There is no advertising cookie. The payment pages belong to Stripe and Paystack, which may set their own cookies.

How long we keep data

• Your account data and what you did in the application are kept as long as your account exists.
• An account whose email address is never verified is deleted after 7 days.
• When you delete your account, your personal data, your searches, your lists and your notes are deleted with it. Payment records are kept for as long as the law requires, without your name or your email address. A digest of your email address, from which the address cannot be read, is kept for one year so that welcome credits are offered only once.
• Removal requests are kept so that a removed business does not come back.

Your rights

You can ask us to:

• give you a copy of the data we hold about you;
• correct data that is wrong;
• delete your account and your data;
• stop or limit a use of your data.

In the application, you can already change your name, your language, your email address and your password in the settings, delete your account there, and export your unlocked businesses and your lists as CSV files.

To exercise a right, write to [email protected] from the email address of your account. We answer within 30 days. If our answer does not satisfy you, you can file a complaint with the data protection authority of your country.

Changes to this policy

When this policy changes, we update the date at the top of this page. If a change affects how we use your data, we tell you by email or in the application before it applies.

Contact

For any question about this policy or about your data, write to [email protected].