Who operates this workspace
Orchavo LLC provides this customer workspace. Contact hello@orchavo.com for privacy questions and requests.
YOUR INFORMATION
Privacy & data.
Updated October 6, 2026
What the workspace stores
Before you become a customer, a service-review request stores your name, business, reply email, requested scope, preferred plan, reply permission and our review notes. Only authorized company operators can review these requests. Submitting a request does not create a paid account or authorize contact with your customers. Contact hello@orchavo.com to correct or request deletion of a request.
We store account email addresses, password hashes, business setup details, agreed scope, approved contacts and permission references, message drafts, decisions, service activity, customer replies, support requests, and billing references. Please provide only information needed for the agreed service. Do not submit card numbers, passwords for other services, medical records, or emergency requests.
How information is used
Information supports sign-in, account security, onboarding, agreed follow-up workflows, support, billing reconciliation, and activity reporting. Standard-template automation uses the wording authorized in your workspace. Permission to use a template does not grant permission to contact an opted-out person.
Service providers
Cloudflare serves the public website and stores private encrypted off-server backups. Render hosts the customer portal and its database. Stripe processes payments and subscription management; Orchavo does not receive full payment-card details. When the email connection is enabled, Resend processes the recipient, sender, message content, and email events needed for delivery and reply handling. Service providers may process data in the United States and other locations under their own applicable terms.
The portal’s standard follow-up templates do not require sending customer content to a language-model provider. Any additional AI-processing arrangement should be described in your agreed service scope before activation.
Security and cookies
The workspace uses an essential sign-in cookie, encrypted business records, password hashing, access checks, and encrypted database backups. These measures reduce risk but cannot guarantee absolute security. This portal does not use advertising cookies.
Your controls and requests
You can pause new message submissions, stop contact with an address, review activity, and download your workspace data. To request correction, account closure, or deletion, contact hello@orchavo.com from your account email. We verify the request and explain any records that must remain for security, billing, disputes, or legal obligations. Local daily backup retention is seven snapshots. Off-server backups use 31 rotating daily slots; missed runs or a disabled backup worker can leave older copies until uploads resume or an operator removes them. Backups are not edited record by record. Before restored data is put back into service, deletion and suppression requests must be reconciled. An encrypted recovery record separately retains workspace closures and keyed opt-out fingerprints so an older backup cannot silently restart a closed or opted-out workflow. Restored workspaces remain held until the privacy record, billing and message-provider history have been reviewed.
We retain account and service records while needed to provide the service and meet these obligations. Verified account-closure requests are reviewed for active subscriptions, disputes and retention requirements before account access and operational content are removed. Limited billing references, security audit records and opt-out fingerprints may remain. Provider-held records require separate review; closing a workspace does not itself cancel a Stripe subscription or erase provider copies. Contact records and message histories are not sold or used for advertising in this workspace.
Customer responsibilities
Your business must have authority to provide its customer information and request follow-up. Keep permission evidence current, honor opt-outs, and avoid submitting information unrelated to the agreed service. Orchavo is intended for business use, not use by children.
Optional AI drafting
If your business authorizes AI drafting, approved business facts, the selected customer request and its latest reply are sent to OpenAI to prepare text for human review. Do not include passwords, payment details, health records or other sensitive information. We request responses without application-level storage; this does not promise zero provider retention. You can turn off this processing in your workspace. AI output does not authorize a send, service commitment or financial action.
Optional text messaging
When SMS is configured and enabled for your agreed service, Telnyx processes sender and recipient phone numbers, message content and delivery events. Orchavo retains permission evidence, approved drafts, replies, delivery status and opt-out records. SMS setup is separate from email permission. STOP requests block further submissions; starting again does not automatically restore permission. Closing a workspace removes its operational SMS records after review, while provider-held records and suppression records require the retention review described above. SMS is unavailable until sender registration and the provider connection are verified.
Optional Jobber connection
When an authorized Jobber administrator connects an account, Orchavo stores encrypted access and refresh tokens and imports read-only client names and the titles, statuses and source identifiers of requests, quotes, jobs and invoices. A requested schedule check stores visible scheduled-item identifiers, titles, start/end times, all-day flags and the observation time for the selected window. It does not create appointments or send notifications. Imported records supply business context; they do not establish permission to contact someone or prove collected revenue. Use Disconnect Jobber to remove stored tokens, and revoke Orchavo in Jobber to remove provider-side authorization. Imported records remain subject to the retention and deletion process above.
Optional Google Calendar connection
When you authorize the Calendar connection, Orchavo stores your Google account identifier, verified email address and encrypted access and refresh tokens. The connection requests busy/free availability on your primary calendar for the time window you choose. The standard availability connection does not read event titles, descriptions or attendees, create events, or send invitations. Busy intervals are used to answer the check and are not stored as calendar events; the workspace retains the check time and success or failure status.
Optional reviewed booking requires a separate Google authorization for events on calendars you own. Orchavo uses that access only on your primary calendar for appointments you explicitly approve. For single appointments and reviewed recurring series, we store the appointment title, time zone, start and end, repeat pattern and occurrence dates, provider event identifier, revision and result to prevent duplicate changes and reconcile failures. We read back those specific appointments and can cancel them when you explicitly confirm. No guests or customer invitations are added. Removing access does not cancel existing appointments; review them in Google Calendar when ending service.
Google Calendar data is not sent to OpenAI, used for advertising, sold or used to train models. Access is used only to provide the availability or reviewed booking feature you request. Disconnect Calendar removes the portal's stored tokens; you can also revoke access in your Google Account's third-party connections. Workspace closure and backup recovery follow the controls above. Orchavo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Orchavo customer text messages
Our optional customer-care and account-notification SMS program uses +1 (864) 442-9467. Text START to request messages, STOP to opt out, or HELP for help. Message frequency varies; message and data rates may apply. Consent is not a condition of purchase. Mobile information and SMS consent are not sold or shared with third parties or affiliates for marketing or promotional purposes. Consent is not transferred to other businesses. Contracted messaging providers process data only as needed to deliver the requested service and honor opt-outs.
Read the complete SMS consent instructions and messaging terms. Registered texting is enabled with recipient permission and opt-out safeguards; each customer business requires its own approved setup.