Privacy Policy

Last updated: 12 October 2025

Effective Date: 1 January 2025
Company: Blue Code Garden B.V., registered in the Netherlands
Data Controller: Blue Code Garden B.V.

1. Definitions

Service (orvanta.ai, orvanta.cloud, and subdomains), Personal Data, Usage Data, Cookies, Data Controller (Blue Code Garden B.V.), Data Subject, User.

Email address, first and last name, company name (optional), billing information (processed by payment provider).

IP addresses, browser type/version, pages visited, visit timing/duration, device identifiers, diagnostic data.

Session cookies (service operation), preference cookies (settings), security cookies. No advertising cookies.

Service provision, customer support, usage analytics, service improvement, billing, security, legal compliance, marketing (with consent).

Personal data retained as long as necessary for stated purposes. Users can request deletion at any time.

Data processed within the EU/EEA. If transferred outside EEA, appropriate safeguards (Standard Contractual Clauses) applied.

To law enforcement (when legally required), during business transactions (mergers/acquisitions), to service providers under DPA.

Encryption at rest and in transit, access controls, regular security audits. No method is 100% secure.

Right to access, rectify, erase personal data
Right to data portability
Right to restrict or object to processing
Right to withdraw consent
Right to lodge complaint with supervisory authority (Autoriteit Persoonsgegevens, Netherlands)
Contact: privacy@orvanta.cloud

Payment processing via Stripe (PCI-DSS compliant). Payment card details not stored by Orvanta.
Analytics (privacy-focused analytics)

Service not intended for users under 18.

Updates communicated via email and site notice.

privacy@orvanta.cloud