Privacy Policy

This Privacy Policy is effective October 10, 2026. It explains how ORVYX processes personal information collected through the ORVYX website, inquiry form, and ORVYX AI assistant. It is intended to be read with the Terms of Use.

This policy applies to visitors, people who submit inquiries, and people who use the assistant. It does not replace a separate privacy notice or data-processing agreement that may apply to a client project built or operated by ORVYX.

ORVYX is the personal information controller for the website’s inquiry and assistant interactions. ORVYX is based in Malaybalay City, Bukidnon, Philippines. For privacy questions, requests, or complaints, contact contact.orvyx@gmail.com.

When you submit an inquiry, we may collect your name, email address, company or organization, optional phone number, selected service or system type, project message, business objective, desired features, planning budget range, preferred timeline, and website address.

When the public endpoints are used, we may process the IP address and user-agent information sent with the request. These details are used for security, abuse prevention, rate limiting, troubleshooting, and service operation.

When you use the AI assistant, the message you send and the limited request context needed to answer it are sent through ORVYX’s server-side integration with Google’s Gemini API. ORVYX does not save the assistant conversation on its servers, but Google may process prompts and responses under the Gemini API terms that apply to the Google Cloud project and service used.

The website does not currently use advertising cookies or analytics cookies. ORVYX may use strictly necessary technical mechanisms supplied by the hosting or security stack to operate and protect the website. The assistant’s conversation state is held in the browser while the panel is open and is not used to create a visitor profile.

ORVYX uses information to receive and respond to inquiries, understand a requested service, prepare or discuss a potential engagement, operate and improve the website, prevent spam and abuse, enforce rate limits, maintain security, troubleshoot failures, and comply with applicable legal obligations.

Depending on the context, processing is based on your consent, steps taken at your request before entering into an agreement, performance of an agreement, ORVYX’s legitimate interests in operating a secure business website, or a legal obligation. ORVYX does not use website inquiries or assistant messages for automated decision-making that produces legal or similarly significant effects about you.

We share information only when reasonably necessary for the purposes described in this policy. This may include sharing inquiry details with ORVYX personnel or contractors who need them to respond, with the configured email provider to deliver inquiry notifications, with a rate-limiting provider when enabled, and with Google’s Gemini API when you use the assistant.

Service providers process information under their own terms and applicable data-protection commitments. ORVYX does not sell or rent personal information and does not share it for unrelated third-party advertising. Information may be disclosed when required by law, legal process, or a legitimate request from a public authority, or when necessary to protect rights, safety, security, or the website.

The AI assistant sends your message to Google’s Gemini API through a server-side integration; the Gemini API key is not exposed to your browser. Google’s treatment of prompts, responses, operational data, and retention depends on the applicable Gemini API service, account, billing status, and terms. Do not submit confidential, sensitive, or unnecessary personal information to the assistant.

ORVYX and its service providers may process information in countries other than the Philippines. Where information is transferred or accessed across borders, ORVYX will use the safeguards required by applicable law and the relevant provider agreements.

Inquiry-related emails and correspondence are retained while the request is active and for up to 24 months after the last substantive interaction, unless a longer period is needed for an agreement, accounting, legal obligation, dispute, fraud prevention, or the establishment, exercise, or defense of a legal claim. After the applicable period, ORVYX will delete or anonymize the information where reasonably practicable.

Security and rate-limiting information is retained only for the period reasonably needed to detect abuse, investigate incidents, and protect the service. ORVYX applies reasonable administrative, technical, and organizational safeguards, including server-side validation, access controls, encrypted transport, rate limiting, and keeping provider credentials out of the browser. No internet transmission or storage system can be guaranteed completely secure.

Subject to the Data Privacy Act of 2012, its implementing rules, and applicable limitations, you may have the right to be informed, access your personal information, request correction of inaccurate information, object to or limit certain processing, request erasure or blocking where legally available, request data portability where applicable, and seek damages or lodge a complaint as provided by law.

To make a request, email contact.orvyx@gmail.com with the subject “Privacy request.” Include enough information for ORVYX to identify the relevant interaction and verify your identity. ORVYX may request additional information before acting on a request and will respond within the period required by applicable law. You may also contact the National Privacy Commission through its official complaint channels.

The website and assistant are intended for people who can lawfully use them for business or organizational purposes. Do not use the inquiry form or assistant to submit information about a child or sensitive personal information unless it is necessary, you have authority to provide it, and ORVYX has given you a secure method for doing so.

ORVYX may update this Privacy Policy when its processing, providers, services, or legal obligations change. The updated version will be posted on this page with a new effective date. Questions and privacy requests should be sent to contact.orvyx@gmail.com.