This is a general template provided for transparency. Please review it (and have it checked by a qualified advisor) before relying on it — it is not legal advice.
These Data Processing Terms describe how Orvoro Marketing Inc. (“Orvoro”, “we”, “us”) handles personal information belonging to your website visitors when you use features that collect it on your behalf. They supplement our Terms of Service and Privacy Policy, and apply whenever we act as your service provider (processor) rather than for our own purposes.
Roles: you are the controller, we are the processor
When you collect personal information from your own visitors — for example through the Orvoro Forms platform or a connected tool such as Contact Form 7 — you decide what is collected and why, so you are the controller of that data. Orvoro stores and routes it only to provide the service to you, on your documented instructions. We do not sell it, use it for our own marketing, profile against it, or use it to train models.
What we process
- Submission content — the fields your visitor fills in (such as name, email address, phone number, and message).
- Technical metadata — the visitor's IP address and browser user-agent, used for spam prevention and delivery diagnostics.
We process it to deliver submissions to your inbox, run the routing actions you configure (email notifications, webhooks, support tickets, and consented marketing-list sign-ups), and keep the service secure.
Your responsibilities
- Have a lawful basis to collect the information and to send it to us.
- Disclose this processing in your own site's privacy policy, including that Orvoro processes submissions on your behalf.
- Obtain any consent your law requires (for example, marketing consent under Canada's CASL) before enabling actions that rely on it.
- Not send us special categories of data (such as health or payment card data) through forms that aren't designed for it.
Security
Submission data is transmitted to us over encrypted connections (HTTPS/TLS) and stored on infrastructure located in Quebec, Canada. We apply access controls, monitoring, and the safeguards described in our Privacy Policy. Access to your submissions is limited to your account; our integration keys are write-only for ingestion and cannot be used to read your inbox.
Sub-processors
We use a limited set of service providers to operate the platform. They act under confidentiality and data-protection obligations and only to the extent needed to provide the service. We do not transfer your visitors' data to third parties for their own purposes. Your sites, databases, and backups are hosted in Quebec, Canada; some providers below are located outside Canada, so personal information they handle may be processed in those countries and be subject to their laws.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Anthropic Anthropic PBC | AI content generation (Ori) — customer-activated | Content submitted to AI features (no-train/limited-retention settings applied) | United States |
| Cloudflare Cloudflare, Inc. | CAPTCHA / bot protection (Turnstile) | IP address, challenge tokens on protected forms | United States |
| OVHcloud OVH Hébergement Inc. / OVH SAS | Infrastructure hosting & compute | Hosted sites, databases, backups, account infrastructure | Canada (Beauharnois, QC) |
| OpenSRS / Tucows Tucows Domains Inc. | Domain registration (fallback registrar) | Domain registrant contact details | Canada / United States |
| Openprovider Hosting Concepts B.V. | Domain registration (primary registrar) | Domain registrant contact details | Netherlands |
| SMTP2GO SMTP2GO (Boost IT Ltd.) | Outbound email delivery | Email sender/recipient addresses, message content in transit | United States / global |
| Stripe Stripe, Inc. / Stripe Payments Canada, Ltd. | Payment processing | Billing contact, payment tokens (no full card data stored by Orvoro) | United States / Canada |
Retention and deletion
We retain submissions for as long as you keep them in your account. Deleting a form deletes its submissions, and closing your account removes the associated data, subject to legal and backup retention periods. You can export or delete submissions at any time from the portal.
Assisting you
If one of your visitors asks you to access, correct, or delete their information, the portal's tools let you act on that request directly. Where you need our help to meet a visitor request or a regulator's inquiry, contact us at support@orvoro.com and we will assist within a reasonable time.
Contact
Orvoro Marketing Inc.
770 Linden Drive, Cambridge, ON N3H 0E3, Canada
support@orvoro.com