Data Processing Terms

These Data Processing Terms describe how Orvoro Marketing Inc. (“Orvoro”, “we”, “us”) handles personal information belonging to your website visitors when you use features that collect it on your behalf. They supplement our Terms of Service and Privacy Policy, and apply whenever we act as your service provider (processor) rather than for our own purposes.

Roles: you are the controller, we are the processor

When you collect personal information from your own visitors — for example through the Orvoro Forms platform or a connected tool such as Contact Form 7 — you decide what is collected and why, so you are the controller of that data. Orvoro stores and routes it only to provide the service to you, on your documented instructions. We do not sell it, use it for our own marketing, profile against it, or use it to train models.

What we process

• Submission content — the fields your visitor fills in (such as name, email address, phone number, and message).
• Technical metadata — the visitor's IP address and browser user-agent, used for spam prevention and delivery diagnostics.

We process it to deliver submissions to your inbox, run the routing actions you configure (email notifications, webhooks, support tickets, and consented marketing-list sign-ups), and keep the service secure.

Your responsibilities

• Have a lawful basis to collect the information and to send it to us.
• Disclose this processing in your own site's privacy policy, including that Orvoro processes submissions on your behalf.
• Obtain any consent your law requires (for example, marketing consent under Canada's CASL) before enabling actions that rely on it.
• Not send us special categories of data (such as health or payment card data) through forms that aren't designed for it.

Security

Submission data is transmitted to us over encrypted connections (HTTPS/TLS) and stored on infrastructure located in Quebec, Canada. We apply access controls, monitoring, and the safeguards described in our Privacy Policy. Access to your submissions is limited to your account; our integration keys are write-only for ingestion and cannot be used to read your inbox.

Sub-processors

We use a limited set of service providers to operate the platform (for example, infrastructure hosting in Quebec, Canadaand email delivery). They act under confidentiality and data-protection obligations and only to the extent needed to provide the service. We do not transfer your visitors' data to third parties for their own purposes.

Retention and deletion

We retain submissions for as long as you keep them in your account. Deleting a form deletes its submissions, and closing your account removes the associated data, subject to legal and backup retention periods. You can export or delete submissions at any time from the portal.

Assisting you

If one of your visitors asks you to access, correct, or delete their information, the portal's tools let you act on that request directly. Where you need our help to meet a visitor request or a regulator's inquiry, contact us at support@orvoro.com and we will assist within a reasonable time.

Contact

Orvoro Marketing Inc.
Cambridge, Ontario, Canada
support@orvoro.com