PRIVACY

Privacy

ORVUM is retail software in development. This notice explains what personal data this website, its request form and the demo behind its access code process, why we process it and what your rights are.

The website is operated by LOSHAK & CO LTD, a private limited company registered in Cyprus under number HE 331741 (VAT number CY10331741B), based at Georgiou A. 117–123, Limassol Del Mar, 4048 Limassol, Cyprus. We are responsible for the personal data described here (the data controller). You can reach us at truth@orvum.com.

This website

There is no newsletter and there are no advertising or analytics cookies, and nothing tracks you across sites.

Requests sent through the form

When you send a request, we receive your name, your email address, the company and role if you add them, and your message. We use them only to reply to you and to continue that conversation. Our legal basis is our legitimate interest in answering requests sent to us (Article 6(1)(f) GDPR). Giving these details is voluntary, but without a name, an email address and a message we cannot reply.

Each request is delivered to our inbox by Resend, an email delivery service, and is also stored with Upstash in Frankfurt, Germany, so that no request is lost. We delete stored requests after 12 months, or sooner if you ask. Emails we exchange with you are kept only as long as that conversation needs them. Please do not send confidential information through the form.

Demo access

If you enter a demo access code, the site sets one strictly necessary cookie that keeps you signed in: it ends after 30 minutes without activity and at the latest after 8 hours. Because the demo cannot work without it, this cookie does not need your consent. Everything inside the demo is synthetic: no real company, client or payment.

Security

To stop anyone guessing the access code or abusing the form, the server counts attempts per connection using a one-way hash of the IP address, kept for at most a day. Our hosting provider, Vercel, processes standard request logs (such as IP address, time and page) to deliver and protect the site. Demo sessions are stored with Upstash in Frankfurt, Germany, without your name or IP address. Our legal basis for these measures is our legitimate interest in keeping the website and the demo secure (Article 6(1)(f) GDPR).

Service providers and transfers outside the EU

Vercel (hosting), Upstash (storage) and Resend (email delivery) process personal data for us as our service providers. Stored data is kept in Frankfurt, Germany, but these providers are based in the United States and may access it from there. Vercel is certified under the EU–US Data Privacy Framework; the data processing agreements of Upstash and Resend include the European Commission's standard contractual clauses.

Contact

You can write to truth@orvum.com, use the form on the website, or message us on LinkedIn. LinkedIn's own privacy policy applies to messages you send there.

Enquiries sent through our earlier contact form

Enquiries sent before 6 November 2026 through the previous contact form are kept in private storage managed by Vercel in Frankfurt, Germany, to respond and for reasonable business follow-up, as described when they were sent.

Your rights

You can ask us for access to your personal data, for its correction or deletion, for its processing to be restricted, and to receive it in a portable format. Write to truth@orvum.com or message us on LinkedIn; we reply within one month.

Right to object. Where we rely on our legitimate interests, you can object at any time, on grounds relating to your particular situation, to the processing of your personal data. Write to truth@orvum.com.

We do not sell your personal data, and we do not use it for automated decisions or profiling. You can also complain to the Commissioner for Personal Data Protection in Cyprus.

The rules for using this website are in our Terms of use.

Notice version 9 November 2026