Privacy policy.

Information we collect

We collect information in three ways: directly from you, automatically from your device, and from third-party services.

• ›Contact and enquiry forms: your name, email address, and any message content you submit.
• ›Account registration: your name and email address when you sign up via Clerk.
• ›Plugin and theme purchases: transaction details, licence tier, and email address processed at checkout.
• ›Support and knowledge base interactions: messages sent to our support team.
• ›Usage data: pages visited, time on page, browser and device type, general location (country/city), and referral source collected via analytics.
• ›Plugin licence data: the domain(s) registered to your licence key.

We do not collect payment card details directly. All payments are handled by our payment processor.

How we use your information

• ›To respond to enquiries, project requests, and support tickets
• ›To create and manage your account
• ›To deliver plugin and theme licences and process purchases
• ›To send transactional emails (receipts, licence keys, password resets)
• ›To validate plugin licences against registered domains
• ›To improve the website, documentation, and plugin products
• ›To monitor site health and uptime

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Cookies and tracking

We use cookies (and similar local-storage entries) for the purposes set out below. You can decline non-essential categories from the cookie banner on first visit, and change your choice any time via the link in the footer.

Essential: set without consent because the site does not function without them:

• ›__clerk_*: sign-in and session state (Clerk).
• ›orravo_cart: items in your cart (localStorage). Cleared after checkout or by clearing site data.
• ›orravo_consent: your cookie banner choice, so we don't ask again.

Marketing / attribution: only set after consent:

• ›orravo_ref: affiliate referral code captured from ?ref= URLs. Used to credit the referring affiliate when you purchase. 30-day lifetime, httpOnly.
• ›orv_ref_active: readable companion flag so the cart UI can show the 10% referral discount line. 30-day lifetime.
• ›orravo_eim_seen: remembers you closed the exit-intent popup so we don't re-show it. 14-day lifetime.
• ›orravo_chat_session: keeps your in-progress chat with the on-site assistant (localStorage). Cleared when you clear site data.

Analytics: only set after consent:

• ›Vercel Analytics first-party visitor counts. No personal identifiers, no cross-site tracking, no behavioural profiles.

Declining non-essential categories disables affiliate attribution (your referrer won't be credited), suppresses the exit-intent popup tracking, and turns off analytics.

Third-party services

We use the following third-party services to operate orravo.com. Each has its own privacy policy governing how they handle the data routed through them:

• ›Clerk: authentication, account creation, session management. clerk.com/privacy
• ›Paystack: payment processing. When you check out we share your email and order metadata with Paystack so they can charge your card. We do not store full card numbers ourselves; Paystack does, under PCI-DSS controls. paystack.com/privacy
• ›Resend: transactional email delivery (receipts, licence keys, support replies, password resets). Sends from send.orravo.com. resend.com/privacy
• ›Vercel: website hosting, edge networking, analytics. vercel.com/legal
• ›Vercel Blob: object storage for uploaded images (customer logos, case-study heroes) and downloadable resources. vercel.com/legal
• ›Supabase: managed PostgreSQL database hosting all account, order, support, and licence data. Hosted in the EU. supabase.com/privacy
• ›Anthropic: only when you use the floating chat widget on orravo.com and we have AI mode enabled, your messages are sent to Anthropic's Claude API to generate a reply. Anthropic does not train on this data. If you do not want your messages processed by an LLM, click the email icon in the widget to switch to human-only follow-up. anthropic.com/legal/privacy

We do not sell, rent, or share your personal information with third parties for marketing purposes, and we do not use any of these processors for behavioural advertising.

On-site chat assistant

If we have the chat widget enabled, you can ask questions in a floating panel at the bottom of the screen. When you submit a message:

• ›Your message and the conversation history are sent to Anthropic (Claude) to generate a reply, when AI mode is on. The conversation is also stored in our database so an admin can review it.
• ›If AI mode is off, your message creates a support ticket and a human responds by email.
• ›If you provide an email in the chat, we use it to follow up. The email is added to our newsletter list only if you explicitly subscribe elsewhere.

Do not paste secrets, passwords, or other sensitive information into the chat. To delete a conversation, email hello@orravo.com with the subject line "Delete chat" and approximate time of the conversation.

Data retention

• ›Account data: retained for as long as your account is active. You may request deletion at any time.
• ›Contact and enquiry submissions: kept for up to 24 months for reference and follow-up.
• ›Purchase records: retained for 7 years as required by Nigerian tax and commercial law.
• ›Analytics data: aggregated and anonymised; no individual retention limit applies.

Your rights

Regardless of where you are located, you have the right to:

• ›Access the personal data we hold about you
• ›Request correction of inaccurate or incomplete data
• ›Request deletion of your data ("right to be forgotten")
• ›Object to or restrict how we process your data
• ›Withdraw consent at any time where processing is consent-based

To exercise any of these rights, email us at hello@orravo.com with the subject line "Data Request".

Security

We take reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), access controls, and secure third-party infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

If you believe your account has been compromised, contact us immediately at hello@orravo.com.

Children's privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. Continued use of the site after changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

Contact

Questions about this policy or your data? Get in touch:

• ›Email: hello@orravo.com
• ›Contact form: orravo.com/contact
• ›Address: Orravo Studio, Abuja (FCT), Nigeria