Privacy Policy

1. Information we collect

We collect information you provide, information created through your use of Oriva, and limited technical information needed to operate and improve the service.

• Account and contact information: name, email, profile photo, authentication records, and communication preferences.
• Marketplace activity: favorites, taste preferences, Passport progress, reviews, cart activity, orders, and customer-support requests.
• Order and delivery information: recipient name, phone number, shipping address, delivery instructions, shipment status, and tracking details.
• Seller information: application details, business profile, listing content, fulfillment settings, payout onboarding status, and marketplace activity.
• Community content: posts, comments, images, follows, blocks, and reports that you choose to submit.
• Location information: approximate or precise location only when you grant permission, plus optional public roaster map details selected by a seller.
• Technical and usage information: device, browser, operating system, app diagnostics, page views, feature engagement, and security events. Landing-page analytics record anonymous events such as page visits, scroll milestones, taste-matcher use, and selected lead type without storing email addresses, cookies, or IP addresses in the analytics record.

Payment card and bank-account details are handled by Stripe. Oriva does not store complete card or bank credentials.

2. How we use information

• Provide authentication, discovery, recommendations, favorites, Passport features, community tools, orders, shipping, and seller operations.
• Process marketplace payments, platform fees, seller transfers, taxes, refunds, and payout onboarding.
• Prevent fraud, abuse, unauthorized access, and violations of our Terms.
• Send requested beta invitations, order updates, account notices, and product communications.
• Measure product performance and improve the experience using aggregated or privacy-conscious analytics.
• Comply with legal obligations and enforce our agreements.

3. When information is shared

We share information only as needed to operate Oriva, complete a transaction, protect the service, or comply with law.

• Independent roasters: a seller receives the customer and order information needed to fulfill its portion of an order.
• Service providers: providers may include Supabase for authentication and data hosting, Resend for requested beta and product email delivery, Stripe for payments and payouts, Shippo and carriers for shipping, Google for address and place services, and Vercel for website hosting.
• Legal and safety purposes: we may disclose information when reasonably necessary to comply with law, protect people, investigate abuse, or defend legal rights.
• Business transactions: information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not sell personal information for money. We do not send email addresses or other directly identifying information in analytics events.

4. Public information

Profile details, reviews, community posts, seller storefronts, and optional public roaster locations may be visible to other users. A seller's private ship-from address is separate from its public map location and is not made public merely by enabling map discovery.

5. Retention and security

We retain information for as long as reasonably necessary to provide Oriva, complete transactions, resolve disputes, meet legal and accounting obligations, and protect the marketplace. Retention periods vary by data type.

We use technical and organizational safeguards designed to protect information, including access controls and encrypted connections. No system can guarantee absolute security, so please use a strong, unique password and contact us if you suspect unauthorized access.

6. Your choices

• Update profile, address, taste, notification, and public-map settings in the app where available.
• Disable optional device permissions such as location or notifications in device settings.
• Unsubscribe from marketing email using the link in the message.
• Request account deletion from the app or by contacting us. Some transaction records may be retained when legally required.
• Request access, correction, deletion, or other privacy rights available under applicable law.

7. Children

Oriva is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us so we can review and remove it where appropriate.

8. Changes and contact

We may update this policy as Oriva changes. We will post the revised version and update the effective date, and we will provide additional notice when required.

Questions or privacy requests can be sent to hello@discoveroriva.com.