Privacy Policy

Last updated: 30 September 2026

ORVO ("we", "us", "our") runs ORVO POS: the web services at orvopos.com and the ORVO App, ORVO Cloud POS, ORVO Vision and ORVO Authenticator mobile apps. This policy says what data we collect, why, who else handles it, how long we keep it and what your rights are.

A business (your employer, or you as the owner) sets up each ORVO account and decides who uses it. For the business records kept in ORVO, the business is in charge of that data and we handle it for them.

1. What We Collect

When you use ORVO, we may collect:

• Account information -- your name, email address, phone number and company code, entered when your employer or the account owner sets you up.
• Business records -- what the business keeps in ORVO: menus, prices, recipes, stock, suppliers, orders, sales and receipts, rosters and hours, and hygiene records.
• Staff records -- for businesses that use ORVO Staff: pay type and rate, date of birth and PPS number (the PPS number is stored encrypted).
• Card payments -- a card is paid on the card company's own machine. We keep the amount, the result and the last four digits of the card for the receipt. We never see or keep the full card number.
• Photos you take or choose -- a picture of a delivery docket or invoice, a logo, or a picture of an item. In ORVO Hygiene, also a photo of a probe thermometer's screen, cleaning photos, and training photos and videos. These are stored on our servers so the business can see them. A delivery docket or invoice is also read by an AI service to fill in the items (see section 8).
• Camera scans -- the apps use the camera to read a QR code: a prep label when counting stock, a staff wallet pass, or a pairing code when linking a till. Only the code is read. The picture is not kept.
• Voice recordings -- when you tap to dictate an order or a stock count, the ORVO App records your voice until you stop. The recording is sent to our server and to OpenAI to turn it into text. It is not kept once the text comes back.
• Authentication data -- records of sign-ins (time, method used, device identifier) for security. We do not store your Authenticator codes.
• Access records -- when you use ORVO web services or the ORVO App: which pages you open, what you change, export or download, and each sign-in, failed sign-in and sign-out, with the time, your internet address and your browser or device. Passwords, PINs, codes and card numbers are never recorded.
• Device token -- a token from Apple (iPhone and iPad) or from Firebase Cloud Messaging (Android), used only to send notifications to your device, such as approval requests and alerts.
• Connection faults -- if the ORVO App cannot reach ORVO, it sends one short line: the time, your internet address, the app and system version, whether the device was online and what failed. We use it only to find and fix faults.
• Location data -- ORVO Authenticator uses your approximate location to tell whether you are at or near your assigned shop, so approval requests go only to nearby managers. It checks when you open the app and, if you choose "Always Allow", through background geofencing. We store only the most recent location and when it was taken; no location history is kept. ORVO Cloud POS can check that a till is at the shop it is linked to. The ORVO App and ORVO Vision do not use your location.
• Biometric confirmation -- ORVO Authenticator uses Face ID or fingerprint to protect access. This happens entirely on your device; we never receive, store or send biometric data.

2. What We Do Not Collect

• We do not read your contacts, your photo library or your files. We only receive a photo, recording or file you choose to take or upload.
• We count visits to orvopos.com without cookies. We do not store your internet address or anything that identifies you. We do not use advertising or tracking tools. Our apps do not track you, and we do not track you across other apps or websites.
• We do not sell personal data, or share it with anyone for advertising or marketing.

3. How We Use Your Data

• Running the business's account -- to keep and show the business's records, take and record sales, build rosters, place stock orders and send the emails ORVO sends for the business.
• Authentication -- to check who you are when you sign in to ORVO or approve an action on the till.
• Notifications -- to send approval requests, alerts and messages to your device.
• AI features -- to read dockets and invoices, turn dictation into text, answer questions in Ask ORVO, draw item pictures and suggest prices or settings. Only what the feature needs is sent (see section 8).
• Proximity check-in -- to tell whether you are at your assigned shop, so approval requests go only to nearby managers.
• Security logging -- to keep a record of sign-ins and of access to ORVO, so that any misuse or breach of an account can be traced. The account owner can see the access records for their own account.
• Fixing faults -- to find out why the app or a page failed.

4. Data Storage and Security

ORVO's data and uploaded photos are stored on ORVO's own server, run for us by Hostinger in the United Kingdom. Emails are sent through our email provider, Hostinger. All data sent between the apps, your browser and ORVO uses HTTPS encryption.

Your Authenticator secret key is stored only on your device, in the phone's secure storage (Android KeyStore or iOS Keychain). It is never sent again after the first setup.

5. Data Retention

Access records and security logs are kept for 12 months, then deleted automatically. Authenticator sign-in records are kept for 90 days. Sales, payment and payroll records are kept for at least six years, because Irish law requires it. Other account data is kept while the account is active. When an account is closed, we delete its personal data within 30 days of the business asking, apart from the records the law requires us to keep.

6. Your Rights

Under GDPR and applicable data protection law, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct data that is wrong.
• Ask us to delete your data.
• Turn off notifications, the camera, the microphone or location at any time in your device settings.

To use these rights, contact the account owner or email us at privacy@orvopos.com. There is no sign-up inside the apps: accounts are set up, and closed, through ORVO.

7. Children's Privacy

ORVO services are not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

8. Third-Party Services

These companies handle data for us, only to provide the feature named:

• OpenAI -- reads docket and invoice photos, turns dictation into text, answers Ask ORVO, draws item pictures and versions of a logo, and writes suggestions. It receives the photo, recording or text for that request.
• Google (Gemini) -- reads docket and invoice photos, reads the photo of a probe thermometer's screen in ORVO Hygiene, and searches for competitor prices.
• remove.bg -- removes the background from a logo the business uploads.
• Apple and Google (Firebase Cloud Messaging) -- deliver notifications to your device. They receive the device token and the notification text.
• Apple Wallet and Google Wallet -- hold staff passes and loyalty cards added to a phone.
• Google Maps -- turns a shop or supplier address into a map position.
• OpenWeather -- gives the weather for a shop's location. No personal data is sent.
• Dojo -- takes card payments on its card machine. It receives the amount and a reference, never your personal details from ORVO.
• Stripe -- takes online payments for gift vouchers.
• Hostinger -- runs our server and sends our emails.

See OpenAI Privacy and Firebase Privacy for how those services handle data.

9. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page shows the most recent change. Continued use of ORVO services after a change means you accept it.

10. Contact

If you have questions about this privacy policy or your data, contact us at:

ORVO
Email: privacy@orvopos.com
Web: orvopos.com