shield
Legal
Privacy Policy
Last updated: September 16, 2026 ·
Effective date: September 16, 2026
ORAVA is a business management platform (point of sale, inventory, analytics, AI assistant) operated by Aquila & Priscilla LLC. This policy explains how we collect, use, and protect information when you use our web app, mobile app (Android / iOS), or any associated services.
1 Information We Collect
Account & Business Information
- Name, email address, and password when you register
- Business name, subdomain, and logo you configure for your workspace
- Billing information processed securely by Stripe (we never store raw card numbers)
Business Data You Enter
- Products, inventory, categories, and pricing
- Sales transactions, invoices, and payment records
- Expenses, suppliers, and stock adjustments
- Customer contacts and client records
Usage & Technical Data
- Log data: IP address, browser type, pages visited, timestamps
- Device information when using the mobile app (device model, OS version)
- Error reports and crash diagnostics
AI Assistant Data
- Messages you send to the ORAVA AI assistant, and the business data needed to answer them, are processed by our AI providers (OpenAI and DeepSeek) to generate responses. Conversations may be retained to improve the service.
2 How We Use Your Information
- To provide, operate, and improve the ORAVA platform
- To process transactions and manage your subscription
- To send transactional emails (invoices, password resets, alerts)
- To respond to support requests and inquiries
- To detect and prevent fraud, abuse, or security incidents
- To comply with legal obligations
- To generate aggregated, anonymized analytics to improve the product
We never sell your personal data or business data to third parties.
3 How We Share Your Information
We share information only with:
- Stripe — payment processing and subscription billing
- Amazon Web Services (AWS) — cloud hosting, database, file storage (S3), and email delivery (SES)
- Cloudflare — CDN, DDoS protection, DNS
- OpenAI — AI assistant and drafting inference; your request and the business data needed to answer it may be sent to generate a response (not used to train public models without consent)
- DeepSeek — AI assistant and drafting inference, under the same conditions as above
- Legal authorities — when required by law, court order, or to protect our rights
All sub-processors are contractually bound to handle data securely and only for the stated purpose.
4 Data Storage & Security
- Data is stored on servers in the AWS cloud region closest to your location
- All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Passwords are hashed using industry-standard algorithms (bcrypt/Argon2); we never store plaintext passwords
- Access to production systems is restricted to authorized personnel with multi-factor authentication
- Regular automated backups with point-in-time recovery
No method of transmission or storage is 100% secure. We take reasonable measures but cannot guarantee absolute security.
5 Data Retention
- Active accounts: Data is retained for the lifetime of your subscription
- Cancelled accounts: Data is retained for 90 days after cancellation, then permanently deleted unless a legal hold applies
- Backups: Deleted from rotating backups within 30 days of the deletion window
- Logs: Retained for up to 12 months for security and debugging purposes
6 Your Rights
Depending on your jurisdiction, you may have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your personal data ("right to be forgotten")
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
- Restriction — request we limit how we process your data
To exercise any of these rights, email contact@aquilapriscilla.com. We will respond within 30 days.
7 Cookies & Tracking
ORAVA uses the following types of cookies and local storage:
- Essential cookies: Authentication tokens and session state required for the app to function. Cannot be disabled.
- Preference storage: Your language, last-used workspace, and UI preferences stored in browser local storage
- Analytics: Aggregated usage data to understand which features are used (no cross-site tracking)
We do not use advertising cookies or sell browsing data to ad networks.
8 Third-Party Services
Our platform integrates with the following third-party services. Their own privacy policies apply when you use them:
9 Children's Privacy
ORAVA is a business management tool intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us at contact@aquilapriscilla.com and we will delete it promptly.
10 Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes:
- We will update the "Last updated" date at the top of this page
- We will notify active users by email at least 14 days before the changes take effect
- Continued use of ORAVA after the effective date constitutes acceptance of the updated policy
11 Contact Us
For privacy-related questions, data access requests, or to report a concern:
12 SMS / Text Messaging
ORAVA, operated by Aquila & Priscilla LLC, sends text messages only to people who have given express consent — either by submitting our contact form with the SMS consent box checked, or by texting a keyword such as DEMO to our published number.
For SMS we collect: your mobile number, your name, the date and time of your consent, the page or keyword through which you consented, and the messages exchanged. We use it only to reply to your enquiry, to send a sample estimate you requested, and to send notices about your own ORAVA account.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
Reply STOP at any time to stop all messages, or HELP for assistance. Message and data rates may apply. Questions: support@useorava.com
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
See our Terms of Service for our full SMS/Text Messaging Terms.