Privacy Policy

What we collect

• Account details — your email address, first and last name, and whether the account is for personal or business use. We don't ask for or store a password.
• Sign-in codes — stored only as a keyed hash, and deleted once used or expired.
• Sessions — a cookie that keeps you signed in. We store only a hash of it.
• API and Explorer usage — for each request: the endpoint, status, timing, the key used, and the device, operating system and browser type. Your IP address is stored only as a keyed hash, not as the address itself.
• Billing — your plan, its changes and payment references. Payments go through the payment gateway; we never see or store card details.
• Location Data — the collections and points you choose to upload.
• Messages — what you send to support@orviamaps.ir.

What we use it for

• signing you in and keeping your account secure;
• providing the APIs, counting usage against your plan and enforcing rate limits;
• billing, and emails about your account, plan or service changes;
• finding and fixing problems, preventing abuse, and improving the service;
• answering support requests.

We don't sell personal data, and we don't use it for advertising. Search queries and coordinates sent to the APIs are processed to answer the request and are not used to build profiles of you or your users.

Cookies

We use only the cookies needed for the site to work: the session cookie, and a short-lived one while you finish signing up. There are no advertising or third-party tracking cookies.

Who we share it with

Only the providers needed to run Orvia — hosting, email delivery and payments — and only what each one needs. We disclose data to authorities only when the law requires it.

How long we keep it

• Account details: while your account exists.
• Request logs: for a limited period, then deleted automatically. Your plan sets how far back you can see them (see Pricing). Monthly usage totals are kept for billing.
• Location Data: until you delete it or your account.
• Deleted accounts: removed within 30 days, except records the law requires us to keep.

Your choices

• Change your name and account use on the Account page.
• Read your Location Data back through the API, or delete it, at any time.
• Ask for a copy of your data, a correction, or deletion of your account by writing to support@orviamaps.ir from the account's email address.

Security

Connections use HTTPS. Codes, sessions and API keys are stored only as keyed hashes, and data is kept on servers we control. No system is perfectly secure; if a breach affects your data, we'll tell you by email.

Children

Orvia is a developer service and isn't meant for anyone under 18.

Changes and contact

We'll email you about material changes to this policy before they take effect. Questions: support@orviamaps.ir.