Privacy policy
Last updated:
Operational statistics
Orvel records operational events such as sign-in outcomes, completed operations, checkout progress, safe error categories and response times in its private product dashboard. Optional identifiers are pseudonymised separately for each product; they do not contain your email. These events are kept for up to 90 days, with scheduled deletion. They exclude passwords, tokens, invoice or CSV contents, raw URLs and IP addresses. No advertising cookies are added. Contact privacy@orvel.dev about these records.
Controller: Antoine LE BORGNE, Entrepreneur individuel, trading as Orvel (privacy@orvel.dev). Purposes: account, cash-register journal, item photos, billing. Legal bases: contract and statutory record-keeping.
Data
Email, merchant legal identity, items and photos, anonymous sales (no customer PII on v1 tickets). Strictly necessary session cookie: minty_session. Login attempts kept 30 days.
Processors
- Railway — Application hosting, database and object storage (EU (Amsterdam) / USA)
- Stripe — SaaS subscriptions and invoices (USA / Ireland)
- Resend — Transactional email (sign-in links) (USA)
Rights
Access, rectification, erasure within fiscal retention limits: privacy@orvel.dev.