1. Who we are

Orvo is built, owned and operated fully by Orton Industries LLC. Orton Industries LLC ("we", "us") is the controller of the personal information described here. Reach us at contact@orvo.build or by post at 6701 Corporate Drive, STE N, Johnston, IA 50131.

This policy covers https://www.orvo.build and the email we send from it. It does not cover the Orvo software itself. Creating a workspace happens in the app, which has its own agreement.

2. What we collect

What you type in

Earlier signups. If you signed up on this Site before it pointed people to the app, we may still hold your first name, work email, and company name, plus optional crew size and what you said hurt most.
Anything you put in an email to us, including a phone number if you give us one.

What gets recorded automatically

Submission metadata: the date and time, the page you submitted from, your browser's user-agent string, and the campaign parameters in the link you arrived on (for example utm_source) plus the referring website.
A truncated, hashed form of your IP address, kept only to spot automated abuse of the form. We do not store your full IP address next to your record.
Analytics data — but only if you agree to it. See section 5.

We do not knowingly collect special category data, government identifiers, card numbers or precise location through this site. Please do not send them to us.

3. Why we use it, and our lawful bases

What we do	Why	Lawful basis (UK/EU GDPR)
Keep records from earlier signups on this Site, and write to confirm them	To honour a request you already made, and to prove it in writing	Steps taken at your request before a contract; consent
Email you about Orvo — the product and marketing messages	You asked to hear from us	Consent, which you can withdraw at any time
Reply when you email us	To answer the question you sent	Legitimate interests in responding to you; consent
Measure which pages and campaigns produce signups	To spend the marketing budget on what works	Consent (analytics cookies)
Block bot submissions and abuse	To keep the form and our sending reputation healthy	Legitimate interests in securing our services
Keep a record of consent and unsubscribe requests	To prove we handled your choices correctly	Legal obligation; legitimate interests

4. Email, and how to stop it

New signups happen in the app, not on a form on this Site. If we already hold your address from an earlier signup, you agreed we may email you about Orvo and send marketing and product messages.

Every marketing message includes a one-click unsubscribe link and our postal address. Unsubscribing is immediate and permanent unless you rejoin. We may still send you a message you specifically asked for, such as a confirmation of your own signup.

Our email goes out through Amazon Simple Email Service, run by Amazon Web Services, Inc. in the United States.

5. Cookies and analytics

The Google tag is in the HTML of every page so the measurement tools can see it, but it starts with storage denied. This site sets no analytics cookies until you choose "Accept all" or switch analytics on under "Customize" in the dialog we show on your first visit. Choose "Reject all" and nothing optional is written. You can change your mind any time using the Cookie settings link in the footer, which clears your stored choice and asks again. Every cookie and storage key we set is listed individually, with its purpose and lifetime, in our Cookie Policy.

Strictly necessary storage (always used)

pillar_consent_v1 — browser local storage. Remembers your cookie choice so we do not ask on every page. Stays until you clear it.
pillar_attribution — browser session storage. Remembers which link brought you here so a later signup is attributed correctly. Cleared when you close the tab.

Google Analytics (only with your consent)

We use Google Analytics 4, provided by Google LLC, to understand how many people visit, what they read, and which pages produce signups. With your consent it sets cookies beginning _ga, which last up to two years and hold a randomly generated identifier. We turn on IP anonymisation, we do not enable Google Signals or advertising personalisation, and we do not build advertising audiences. Google's own handling is described in Google's Privacy Policy (opens in a new tab), and you can install Google's opt-out browser add-on (opens in a new tab).

We also use Google Search Console, which reports aggregate, anonymous statistics about the searches that surface this site. It sets no cookies on your device and does not identify you to us.

Global Privacy Control. If your browser sends a recognised opt-out preference signal, we treat it as declining analytics (Google Analytics) and as an opt out of any sharing of personal information for cross-context behavioural advertising.

6. Who else sees it

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not rent, trade or pass your address to other vendors. It goes only to service providers acting on our instructions:

Amazon Web Services, Inc. — hosting, the database holding the list, and email delivery. Stored in AWS regions in the United States.
Google LLC — analytics and search performance reporting, as described above, and only where you consented.
Professional advisers, or an acquirer — if we are audited, involved in a legal claim, or party to a sale of the business, under confidentiality obligations.
Law enforcement or regulators — where legally required, and no further.

7. Where it goes

We are in the United States and our infrastructure runs there. If you are in the United Kingdom, the European Economic Area or Switzerland, your information will be transferred to and processed in the US. Where required, those transfers rely on the European Commission's Standard Contractual Clauses and the UK Addendum, which our processors have signed, alongside the technical measures in section 9.

8. How long we keep it

Earlier signup records: until you unsubscribe or ask for deletion, or three years after your last interaction with our email or site, whichever comes first.
Unsubscribe records: kept indefinitely, because the only reliable way to honour "never email me again" is to remember that you said it.
Abuse-prevention metadata: up to 90 days.
Google Analytics data: retained by Google for 14 months on our setting.

9. How we protect it

The list lives in Amazon DynamoDB with encryption at rest, reachable only by one server-side function with narrowly scoped permissions. Traffic to this site and to that function is encrypted in transit with TLS. Access to the underlying AWS account is limited to named people with multi-factor authentication. No system is perfect, and we will not pretend otherwise — but we will tell you promptly if something goes wrong in a way that affects you.

10. Your rights

Depending on where you live you may have some or all of the following rights. We honour them for everyone, wherever you are, because that is simpler and fairer than checking your zip code first.

Know and access what we hold about you.
Correct anything wrong.
Delete it. This is the one most people want, and it takes us one action.
Withdraw consent at any time, including by unsubscribing.
Object to or restrict processing based on legitimate interests.
Portability — get your data in a machine-readable format.
Opt out of sale or sharing. We do not sell or share personal information as those terms are defined under California law, so there is nothing to opt out of — but you are welcome to confirm that with us.
Non-discrimination — using any of these rights will not change how we treat you.

To use any of them, email contact@orvo.build from the address you signed up with, or tell us which address to look up. We reply within 30 days, or 45 where the law allows an extension and the request is complex. An authorised agent may act for you with written proof.

If you are in the UK or EEA and you think we have handled your information badly, you can complain to your supervisory authority — but give us the chance to fix it first.

11. Children

This site is for construction professionals and is not directed at children. We do not knowingly collect information from anyone under 18. If you think a minor gave us their details, email us and we will delete the record.

12. Automated decisions

We read the list by hand. We do not make decisions with legal or similarly significant effects about you using automated processing alone.

13. Changes

When we change how we handle your information we will update this page and move the effective date at the top. If the change is material and we hold your address, we will tell you by email before it takes effect.

14. Governing law

This Privacy Policy is governed by the laws of the State of Iowa, United States, without regard to conflict of laws rules. You and we agree to the exclusive jurisdiction of the state and federal courts there for any dispute not resolved informally.

15. Contact

Questions, requests or complaints: contact@orvo.build, or Orton Industries LLC, 6701 Corporate Drive, STE N, Johnston, IA 50131.