Privacy Notice

Orevia world (“OREVIA”, “we”, “us”) operates the OREVIA digital concierge platform for hotels, restaurants and cafes. For the personal data described in this notice, Orevia world is the data controller — we decide how and why that data is processed.

• Account data — name, email address, password (stored only as a secure hash), venue name and role (owner, manager, staff).
• Venue content — menus, prices, policies, photos, wifi details and other content you publish.
• Support messages — messages you send us and our replies.
• Usage and technical data — pages visited, feature usage, device and browser type, IP address and approximate location, used for security and product improvement.
• Guest interactions — requests, orders and feedback submitted through guest pages. Guests are not required to create accounts; guest sessions use anonymous identifiers only.

Payment card details are collected and processed directly by Paddle (our Merchant of Record) — we never see or store your card numbers.

• Providing the service — creating accounts, running guest pages and dashboards (performance of our contract with you).
• Security and fraud prevention — protecting accounts and the platform (legitimate interests).
• Product improvement and analytics — understanding how the service is used (legitimate interests).
• Customer support — responding to your questions (performance of contract / legitimate interests).
• Marketing — occasional product updates, where permitted (consent, which you can withdraw at any time).
• Legal obligations — records we must keep by law.

• Service providers / subprocessors — hosting, database, analytics and support tooling providers that process data on our behalf under contract.
• Paddle (Merchant of Record) — for the sale of subscriptions, payment processing, tax compliance and invoicing. Paddle processes buyer data under its own privacy terms.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where required by law or to protect rights and safety.

We do not sell personal data.

We keep personal data for as long as your account is active and as needed for the purposes above. When data is no longer needed — for example after account closure and any legal retention periods — it is deleted or anonymised.

Depending on your location, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent where processing is based on consent. You may also have the right to complain to your local data protection authority. To exercise any right, email support@orevia.world — we respond within one month.

We apply appropriate technical and organisational measures, including encryption in transit, hashed passwords, access controls and row-level isolation between venues, to protect personal data.

We use essential cookies and local storage to keep you signed in and to run the service. We do not use third-party advertising cookies. You can clear cookies in your browser settings; essential features may stop working if you block them.

We may update this notice from time to time; the “last updated” date above shows the current version. Questions or requests: support@orevia.world.