1.1 The data controller responsible for your personal data is:
Orvind AS
Ankara, Türkiye
Privacy contact: hello@orvind.com
1.2 For any questions, requests, or concerns regarding your personal data, please contact us at the email address above.
2.1 app.orvind.com — The main Platform, which requires user registration and provides AI-powered playable ad campaign management tools. This policy applies in full to registered users of app.orvind.com.
2.2 demo.orvind.com — A publicly accessible demonstration site that does not require registration, does not collect any personal data, and does not use tracking technologies beyond what is described in Section 7. This policy applies to demo.orvind.com only to the extent described in Section 7.
We collect only the minimum personal data necessary to provide the Platform's services.
| Category | Data Elements | Source | Purpose |
|---|---|---|---|
| Account Identity | Full name, email address, company name | Provided by you at registration | To identify you, create and manage your account, and provide Platform services |
| Profile Information | Phone number (optional), country code (optional), job title (optional), referral source (optional) | Provided by you in profile settings | To personalise your experience; referral source to understand how users discover the Platform |
| Authentication Data | Email address, hashed password, session tokens | Provided at login | To authenticate you and maintain a secure session |
| Game Assets | Unity project files, images, videos, and other media files you upload | Uploaded by you | To generate and render playable ad variants for your campaigns |
| Demo Booking Data | First name, last name, email address, company name, phone (optional), preferred date/time (optional), message (optional) | Submitted via the demo booking form | To schedule and conduct product demonstrations |
| Consent Records | Timestamps of acceptance of Terms of Service, Privacy Policy, and Unity Recorder EULA | Recorded automatically at time of acceptance | To maintain an auditable record of your consents |
| Usage & Technical Data | Browser session data (via Supabase Auth), platform interaction logs limited to administrative audit trail | Collected automatically | Security, fraud prevention, and service integrity |
3.1 We do not collect sensitive personal data (such as health data, racial or ethnic origin, political opinions, or financial information).
3.2 We do not use your personal data for marketing, profiling, or advertising purposes.
3.3 We do not sell or share your personal data with data brokers or any third party for commercial purposes.
We process personal data only where we have a valid legal basis to do so.
| Processing Activity | Legal Basis |
|---|---|
| Creating and managing your account; delivering Platform services | Performance of a contract (Art. 6(1)(b) GDPR) |
| Processing demo booking form submissions | Legitimate interest — responding to an explicit request from you (Art. 6(1)(f) GDPR) |
| Storing consent records and audit logs | Legal obligation and legitimate interest in maintaining compliance records (Art. 6(1)(c) and (f) GDPR) |
| Maintaining security and preventing fraud | Legitimate interest (Art. 6(1)(f) GDPR) |
5.1 Account & Identity Data (name, email, company) is used solely to identify you within the Platform, manage your account, and provide contracted services. It is not used for marketing or shared with any third party beyond our service providers listed in Section 6.
5.2 Game Assets you upload are stored securely and used only to render your playable ad variants. Assets are accessible only to you (enforced by row-level security in our database). Assets are permanently deleted when you delete the associated campaign or your account. Rendered variant previews processed on our cloud infrastructure are automatically purged at regular intervals (no less frequently than every two hours).
5.3 Demo Booking Data is used solely to schedule and conduct your demo. It is sent to us via email and retained for up to two (2) years, after which it is permanently deleted.
5.4 Optional profile fields (phone, job title, referral source) are used only to personalise your Platform experience and are never shared with third parties for commercial purposes.
We share personal data only with the following service providers, strictly to operate the Platform. Each is bound by data processing agreements and applicable data protection law.
| Provider | Role | Data Received | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, and file storage infrastructure | All account data, game assets, campaign data, session tokens | Determined by your selected project region |
| Resend, Inc. | Transactional email delivery | Demo booking form submissions (name, email, company, phone, message) for delivery to our inbox and confirmation emails to you. Resend does not retain email content beyond delivery. | United States |
| Google Cloud Platform (GCP) | Playable ad variant rendering | Variant configuration data and uploaded assets as needed to render previews. Rendered data is automatically purged at least every two (2) hours. | Determined by project configuration |
6.1 We do not use any other third-party analytics, advertising, or data broker services.
6.2 Where sub-processors are located outside the European Economic Area (EEA), we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) to ensure an adequate level of protection for your data.
7.1 app.orvind.com uses a single authentication session cookie set by Supabase to maintain your logged-in session. This cookie is strictly necessary for the Platform to function and does not track you across other websites. No marketing or analytics cookies are used.
7.2 demo.orvind.com does not set any cookies and does not collect any personal data.
7.3 Your browser's local storage may be used to store UI preferences (such as colour theme). This data is stored only on your device and is not transmitted to our servers.
7.4 Because we use only strictly necessary cookies, no cookie consent banner is legally required. Should we introduce any non-essential cookies in the future, we will update this policy and implement an appropriate consent mechanism.
| Data Category | Retention Period |
|---|---|
| Account and profile data | For the duration of your account, plus a 7-day grace period after deletion request. Accounts inactive for more than 2 years may be deleted after prior notice. |
| Campaign data and uploaded game assets | Deleted immediately when the associated campaign is deleted, or when your account is deleted. |
| Rendered variant previews (GCP) | Automatically purged every 2 hours. |
| Demo booking form submissions | 2 years from the date of submission. |
| Consent records and audit logs | Retained for the lifetime of your account plus 3 years, to satisfy legal compliance obligations. |
| Authentication session tokens | Invalidated upon logout or session expiry. |
Depending on your jurisdiction (including under GDPR for individuals in the EEA), you have the following rights regarding your personal data:
9.1 To exercise any of these rights, contact us at hello@orvind.com. We will respond within 30 days. We may need to verify your identity before processing your request.
9.2 You also have the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence.
10.1 We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include:
10.2 No method of electronic storage or transmission is 100% secure. In the event of a personal data breach that poses a risk to your rights, we will notify affected users and relevant authorities as required by applicable law.
The Platform is intended for use by business professionals and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@orvind.com and we will promptly delete it.
12.1 We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email or via a notice on the Platform at least 14 days before the changes take effect.
12.2 The current version and effective date are always displayed at the top of this document. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
For any privacy-related questions, requests, or concerns:
Orvind AS
Ankara, Türkiye
Email: hello@orvind.com