Privacy Policy

When you create an account:

• Email address (required for magic-link sign-in)
• Display name and bio (you provide these during onboarding)
• Your creator slug (your public page URL)

When you book a session:

• Email address (used to send booking confirmation and class reminders)
• Session and booking metadata (which session, what time, booking token)

Automatically:

• If analytics is enabled, product usage events via PostHog (such as page views and feature interactions)
• If error monitoring is enabled, technical reports via Sentry (such as stack traces and browser or device metadata)
• Standard infrastructure logs (such as IP address, timestamp, request path, and response status), subject to our hosting provider’s configured retention

• Payment card or bank account data. All payment processing is handled by Stripe. Orven never sees or stores your card number, CVV, or bank details.
• Unannounced recordings. Live video is transmitted through Daily.co. Classes are not recorded by default. If recording is enabled for a class, the live room displays recording status and Daily processes the recording for any replay made available to booked attendees.
• Health or fitness data. We do not collect information about your physical condition, medical history, or wellness metrics.

We use the data we collect to:

• Authenticate you via magic link (email)
• Confirm bookings and send class reminders (email)
• Display your creator profile on your public page (display name, bio)
• Monitor platform health and fix bugs (infrastructure logs and Sentry, if enabled)
• Understand how the platform is used (PostHog, if enabled)

We do not sell your personal data. We do not share your data with advertisers or data brokers. We do not use your data to build advertising profiles.

Depending on the features enabled and used, Orven works with the following services that may process data on our behalf:

• Account data is retained as long as your account is active.
• Booking records are retained for up to 7 years for tax and legal compliance purposes.
• Infrastructure logs follow the retention configured with our hosting and monitoring providers and are kept only as needed for security and troubleshooting.
• Analytics events, when enabled, follow the retention configured in PostHog.

You can:

• Request a copy of the personal data we hold about you.
• Request deletion of your account and associated personal data (subject to legal retention requirements above).
• Opt out of analytics tracking by enabling Do Not Track in your browser or contacting us directly.

To exercise any of these rights, email us at support@orven.app. We will respond within 30 days.

Orven is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

If we make material changes to this policy, we will notify you by email or by posting a notice on the platform before the change takes effect.