Privacy policy

Orvale is a landing page builder available at orvale.app, operated by EAANE Ventures SIA, a company registered in Latvia ("we", "us"). EAANE Ventures SIA is the data controller for the personal data described in this policy. You can reach us at [email protected].

We collect only what the service needs to function:

• Account data, your email address and the sign-in provider you used.
• Content you create, the sites you build, the prompts you write, and the assets you upload or generate, including images and font files.
• Billing data, handled by Stripe. We never see or store your card number, we keep only your subscription status, plan and billing dates.
• Technical data, standard server logs such as IP address, browser type and request timestamps.
• Product usage, which features you use and when, such as generating a page, adding a section or publishing a site. These records identify you by your account id, never by name or email, and they never include the content of a page, a prompt or a domain you connect.

We use your data to run the service, to generate and host your sites, to process your subscription, to answer support requests and to keep the platform secure. Product usage tells us which parts of the builder are worth improving. We do not sell your personal data and we do not run advertising or cross site tracking.

When you generate a page, an image or a video, your prompt and the relevant site content are sent to our AI providers to fulfil that request. We share only what the generation needs, and we do not use your content to train models of our own.

We rely on a small set of processors to operate Orvale:

• Google Firebase, authentication, database, file storage and hosting infrastructure.
• Stripe, payment processing and subscription management.
• AI model providers such as OpenAI and Topaz Labs, generation and enhancement of content you request.
• Amplitude, product usage analytics, as described in section 2.

Each provider receives only the data required for its role.

We use local storage for functional preferences such as your theme, and the cookies our authentication provider needs to keep you signed in. Our analytics provider sets its own first party cookie, which holds a random device id so repeat visits from this browser count as one person rather than many. There are no advertising or cross site tracking cookies.

When you publish a site to a subdomain, its content becomes publicly available on the internet. Anything you place on a published page, including contact details, is visible to anyone who visits it.

Your sites and assets stay in your account until you delete them, deleting a site from the dashboard removes its data from our systems. To delete your entire account, contact us and we will remove it along with your content. We keep billing records for as long as tax and accounting law requires.

Under the GDPR you can request access to your personal data, have it corrected or deleted, receive a copy in a portable format, and object to or restrict certain processing. Write to [email protected] and we will respond within a month. You can also lodge a complaint with your local supervisory authority, for us that is the Latvian Data State Inspectorate.

Orvale is not directed at children and we do not knowingly collect data from anyone under 16.

If this policy changes in a meaningful way we will update the date at the top and, for significant changes, notify you by email or inside the product.