1. Overview & Scope
Orvenath (“Orvenath”, “we”, “us”, “our”) is a software studio and technology group operating as a sole proprietorship registered in Gurugram, Haryana, India, owned and operated by Mridul Gaur.
This Privacy Policy explains what information we collect, why we collect it, and what we do with it. It applies to:
- The website at orvenath.com and all its subpages
- Direct correspondence with us at hello@orvenath.com
- Scheduling and consultation bookings made through our published calendar link
- Client engagements carried out by Orvenath Studio and Orvenath Labs
If you do not agree with this policy, please do not use our website or contact us through the channels described here.
2. Information We Collect
2.1 Information you give us directly
When you email us or book a call, we receive whatever you choose to send. Typically this includes:
- Your name
- Your email address
- Your company or organisation name, if you provide it
- The contents of your message, project brief, or scoping notes
- Any files, designs, or documents you share with us
2.2 Information collected automatically
Our website is hosted on Vercel. Like virtually all web hosts, Vercel automatically records technical information about requests made to the site, including:
- IP address
- Browser type and version
- Device and operating system
- Pages requested and timestamps
- Referring URL
We do not control this collection and we do not use it to build profiles of visitors. It exists for infrastructure operation, security, and abuse prevention.
2.3 What we do not collect
Explicit Privacy Guarantees
- No analytics: We do not run Google Analytics, Plausible, Fathom, or any equivalent.
- No advertising or tracking cookies: We do not track you across sites.
- No third-party marketing pixels: No Meta pixel, no LinkedIn Insight tag, no retargeting.
- No newsletter list: We do not collect email addresses for marketing.
- No account system: There is nothing to sign up for on orvenath.com.
If this changes in future — for example, if we add privacy-respecting analytics — we will update this policy and change the “Last Updated” date above.
2.4 Client project data
When we build software for a client, that software may collect data from the client's own users. In those cases:
- The client is the data controller. They decide what is collected and why.
- Orvenath acts as a data processor, handling that data only as needed to build, test, and deploy the system, and only on the client's instructions.
- Specific terms are set out in the individual engagement agreement, which takes precedence over this policy for that project.
We do not use client project data for our own purposes, and we do not retain production data after handover unless the engagement agreement specifically requires it.
3. Why We Use Your Information
We use the information described above only for these purposes:
| Purpose | What this means in practice |
|---|---|
| Responding to inquiries | Reading your message and replying to it |
| Scoping and quoting | Understanding your requirements well enough to give an accurate proposal |
| Delivering engagements | Building, testing, and deploying what we agreed to build |
| Invoicing and payment | Issuing invoices and recording payments received |
| Legal and tax compliance | Keeping records required under Indian law |
| Security | Protecting our infrastructure from abuse |
We do not sell your information. We do not rent it, trade it, or share it with data brokers. We do not use it to advertise to you.
4. Third-Party Services We Rely On
We use a small number of third-party services to operate. Each has its own privacy policy governing how it handles data:
| Service | Purpose | What it may receive |
|---|---|---|
| Vercel | Website hosting | IP addresses, request logs |
| Cloudflare | DNS and email routing | DNS queries, forwarded email |
| Zoho Mail | Business email | Contents of email correspondence |
| Cal.com | Consultation scheduling | Name, email, booking details |
| GoDaddy | Domain registration | Registrant information |
We choose providers with reasonable privacy practices, but we do not control their systems. Please review their policies if you have concerns about a specific provider.
5. Data Retention
We keep information only as long as we have a reason to:
- Inquiries that do not become projects: retained up to 12 months, then deleted
- Active client correspondence: retained for the duration of the engagement
- Completed project records: retained for 7 years, as required for Indian tax and accounting compliance
- Invoices and financial records: retained for 7 years, as required by law
- Server logs: retained according to Vercel's standard retention schedule
You may ask us to delete your information sooner. We will comply unless we are legally required to keep it — for example, invoices connected to tax filings.
6. Your Rights
Depending on where you live, you may have specific legal rights over your personal data. We extend the following rights to everyone who contacts us, regardless of location:
- Access: ask what information we hold about you
- Correction: ask us to fix information that is wrong
- Deletion: ask us to delete your information, subject to the legal retention periods above
- Portability: ask for a copy of your information in a usable format
- Objection: ask us to stop processing your information
To exercise any of these, email hello@orvenath.com. We will respond within 30 days.
If you are in the European Economic Area or the United Kingdom
Under the GDPR, our legal bases for processing are:
- Legitimate interests: responding to inquiries, operating and securing our website
- Contract performance: delivering an engagement you have entered into with us
- Legal obligation: retaining financial records as required by Indian law
You also have the right to lodge a complaint with your local supervisory authority.
If you are in California
Under the CCPA/CPRA, you have the right to know what personal information we collect, to request its deletion, and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law.
7. International Transfers
Orvenath operates from India. Our clients are primarily outside India. If you contact us or engage us from another country, your information will be transferred to and processed in India, and may be processed by our service providers in other jurisdictions including the United States and the European Union.
By contacting us, you understand that your information will be handled as described in this policy.
8. Security Controls
We take reasonable technical and organisational measures to protect information in our care:
- All connections to orvenath.com are encrypted via HTTPS
- Business email is accessed over encrypted connections
- Access to client systems is limited to what an engagement requires
- Credentials and access tokens are never stored in plain text or committed to version control
- Client code repositories are kept private unless the client requests otherwise
No system is perfectly secure. If a breach occurs that affects your personal data, we will notify you and any relevant authority as required by applicable law.
9. Children
Our website and services are directed at businesses and are not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
10. Changes to This Policy
We may update this policy as our services change. When we do, we will revise the “Last Updated” date at the top. Material changes affecting how we handle your information will be communicated directly to active clients.
11. Contact
For any question about this policy, or to exercise any right described above:
We respond to privacy inquiries within 30 days.