Privacy & Data HandlingPolicy.

Clients retain exclusive ownership and custody of their source code, database contents, algorithms, and intellectual property. Orvatos does not request GitHub access, repository write tokens, or offline code archive uploads for standard guided consultations.

During live advisory calls, relevant screens, error messages, terminal logs, or carefully selected code snippets may be displayed via screen sharing to diagnose issues. Clients are expressly advised to avoid displaying credentials, database passwords, private encryption keys, production API secrets, or customer personal data during screen sharing.

Recommendations, architectural blueprints, and AI prompt instructions provided during sessions are applied by you in your environment. You remain in complete control over what code is written, reviewed, and deployed.

We respect the confidentiality of technical information, business details, architecture diagrams, and other materials shared by clients during engineering consultations.

Client information is accessed only by authorized personnel when necessary to provide the requested services.

We take reasonable measures to protect client information against unauthorized access, disclosure, or misuse.

AI & Third-Party Services: Where external tools or services are required to deliver a consultation, we aim to minimize the sharing of confidential client information and obtain appropriate authorization where necessary.

To provide technical triage, schedule consultation calls, and maintain client dashboards, we collect the following categories of information:

We process information solely for legitimate operational and consulting purposes:

• Evaluating intake submissions and estimating technical advisory scopes.
• Conducting live consultation sessions and delivering implementation guidance.
• Maintaining authenticated access to your Client Advisory Portal and active tickets.
• Documenting agreed milestones, testing findings, and client sign-offs.
• Communicating scheduling, consultation agendas, and status notifications.
• Processing milestone payments and fulfilling statutory accounting requirements.
• Protecting platform infrastructure against unauthorized access, spam, or abuse.

To deliver our web platform and advisory workflow, we utilize reputable third-party infrastructure service providers who process data strictly under confidentiality agreements:

• Hosting & Compute: Secure cloud application platforms for website and dashboard delivery.
• Database & Storage: Managed PostgreSQL and Supabase infrastructure for encrypted client record storage.
• Communications & Meetings: Enterprise video conferencing (e.g. Google Meet) and Google Workspace for communications.
• Payment Processors: PCI-DSS compliant payment gateways for processing milestone transactions.

Session Inactivity: Authentication cookies maintain an active session for 7 days of inactivity, after which re-authentication is required.

Consultation Records: Ticket details and dashboard notes are retained during active engagements and for an operational period following milestone validation to facilitate follow-ups.

Deletion Requests: Clients may request deletion of their account records and intake notes by emailing contact@orvatos.in. Information will be purged except where retention is strictly required by statutory accounting, tax, or legal compliance mandates.

We employ standard industry administrative and technical measures to protect stored information, including encrypted HTTPS data transmission and role-restricted database access.

We use strictly functional cookies and browser local storage required for platform operation:

• Authentication Cookie: Manages verified client login state with a 7-day inactivity expiration.
• Theme Preference: Stores your dark or light theme selection in browser local storage.
• Intake Step Progress: Temporarily preserves multi-step technical intake inputs so progress is not lost upon accidental page refresh.

We do not use third-party behavioral advertising cookies or cross-site behavioral tracking scripts.

ORVATOS operates from India and recognizes the importance of protecting personal information. Our handling of personal data is subject to applicable Indian data protection laws, including the Information Technology Act, 2000, and provisions of the Digital Personal Data Protection Act, 2023, and related rules, to the extent they are in force and applicable.

We collect and process personal information for purposes such as account management, technical consultations, customer support, invoicing, and providing our services, as further described in this Privacy Policy.

Clients may contact us at contact@orvatos.in to request access to, correction of, or deletion of their personal information, subject to applicable legal requirements and legitimate data-retention obligations.

We review privacy-related requests and handle them in accordance with applicable legal requirements.

For privacy inquiries, data deletion requests, or questions regarding confidentiality terms, contact us directly: