Provider: Orvoro Marketing Inc.
Version: 2026-10-19
We welcome reports of security vulnerabilities and will work with researchers acting in good faith.
How to report
Email security@orvoro.com with a description of the issue, the affected component, and steps to reproduce. A machine-readable contact is also published at /.well-known/security.txt. We acknowledge reports and keep you updated on remediation.
Scope
In scope: orvoro.com, our customer and staff portals, our APIs, and the platform infrastructure we operate. Customer-owned websites hosted on our platform are not in scope without the explicit consent of their owner.
Safe harbour for good-faith research
If you make a good-faith effort to comply with this policy, we will not pursue action against you for your research. Please: avoid privacy violations, data destruction, and service degradation; do not access more data than necessary to demonstrate the issue; and give us reasonable time to remediate before public disclosure.
Out of scope
Denial-of-service testing, social engineering of our staff or customers, and physical attacks are out of scope.
Our commitment
We acknowledge reports, keep you updated on remediation, and do not claim security controls we do not continuously maintain.
Orvoro Marketing Inc.
25 Isherwood Ave, Cambridge, ON N1R 0E2, Canada