Privacy Policy

Oryve is a software product developed and operated by IEB Group Wyoming LLC ("we", "us", "our"), a limited liability company registered in Wyoming, United States. This Privacy Policy applies to the Oryve web application available at oryve.app and any related services. If you have questions about this policy, contact us at eureka.lucis@gmail.com.

• ·Account data: Your email address, display name, and password (stored as a bcrypt hash). If you link GitHub, we also store your GitHub user ID and an OAuth access token for repository sync.
• ·Project data: Project names, descriptions, types, tasks, milestones, and notes that you create within Oryve.
• ·GitHub repository data: Commit messages, commit dates, and open pull request counts from repositories you explicitly link to a project.
• ·Usage data: Pages visited, features used, and timestamps, collected via standard server logs and optional error monitoring (Sentry) when configured.
• ·AI interaction data: Prompts and project context sent to OpenAI's API to generate briefings, validations, focus suggestions, and wizard content on your behalf.
• ·Session data: Authentication tokens stored in secure, HTTP-only cookies to maintain your login session.

• ·To provide and operate the Oryve service, including displaying your projects, generating AI briefings, and syncing GitHub data.
• ·To authenticate you securely using email and password (NextAuth v5), with optional GitHub OAuth for sign-in and repo access.
• ·To generate AI-powered content (daily briefings, nudges, ideation, validations) by sending relevant project context to OpenAI's API.
• ·To send transactional email (password reset, beta invites, optional briefing and reminder emails) when you opt in or request them.
• ·To communicate with you about your account, service updates, or legal changes — no marketing without explicit consent.
• ·To detect and prevent abuse, fraud, or violations of these terms.
• ·We do NOT sell your personal data to any third party, ever.

• ·OpenAI: Project names, descriptions, and task data are sent to OpenAI's API to generate AI content. OpenAI processes this data subject to their Privacy Policy at openai.com/policies/privacy-policy.
• ·GitHub (optional OAuth): If you connect GitHub, authentication and repository access are handled by GitHub. Data shared is governed by GitHub's Privacy Statement at docs.github.com/en/site-policy/privacy-policies.
• ·Resend: Transactional emails (password reset, invites, reminders) are sent via Resend subject to resend.com/legal/privacy-policy.
• ·Railway: Our backend server and PostgreSQL database are hosted on Railway. Data is stored in the United States.
• ·Vercel: The frontend application is deployed on Vercel. Request logs may be retained by Vercel subject to their privacy policy.
• ·Sentry (optional): When configured, error reports may include request metadata to help us fix production issues.
• ·We have no data-sharing agreements beyond what is necessary to operate the service.

We retain your data for as long as your account is active. If you request account deletion, we will permanently delete all your projects, tasks, and personal data from our systems within 30 days. GitHub OAuth tokens are stored while your account is linked. You can unlink GitHub in Settings or revoke Oryve's access via GitHub Settings → Applications.

• ·Right of access: You may request a copy of all personal data we hold about you.
• ·Right to deletion: You may request that we delete your account and all associated data (also available in Settings).
• ·Right to portability: You may export your project data in JSON format from Settings.
• ·Right to correction: You may request that we correct inaccurate data.
• ·Right to restrict processing: You may request that we limit how we use your data.
• ·California residents (CCPA): You have the right to know what personal information is collected, to opt out of sale (we do not sell data), and to non-discrimination for exercising these rights.
• ·To exercise any of these rights, email eureka.lucis@gmail.com. We will respond within 30 days.

We use cookies solely for authentication (session tokens) and user preferences (theme selection stored in localStorage). We do not use advertising cookies, tracking pixels, or third-party analytics cookies. See our Cookie Policy for full details.

We implement industry-standard security measures including HTTPS-only transport, HTTP-only session cookies, bcrypt password hashing, and parameterized database queries to prevent injection attacks. However, no system is 100% secure. You use Oryve at your own risk. We recommend not storing highly sensitive confidential information (e.g., passwords, financial account numbers) in project descriptions or task notes.

Oryve is not directed at individuals under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us immediately at eureka.lucis@gmail.com and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above and, where appropriate, by email. Continued use of Oryve after changes constitutes acceptance of the updated policy.