Back to home

Privacy Policy

Last updated: May 17, 2026

1. Introduction

OVirtual ("we", "us", "our") respects your privacy. This policy describes what information we collect, how we use it, and the choices you have.

2. Information We Collect

Account information: Email address, name, hashed password, and optional organization name when you register.

Usage data: Prompts you submit to the AI, projects you create, files you upload, deployments you make, and your interactions with the platform.

Payment information: Billing details processed through our payment provider (Square). We do not store your full card numbers — Square handles payment data directly.

Technical data: IP address, browser type, device information, and timestamps for security and analytics purposes.

API keys (BYOK plan): If you provide your own API keys for AI providers, they are encrypted at rest using AES-256-GCM before being stored.

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Process payments and manage subscriptions
  • Communicate with you about updates, security notices, and support requests
  • Detect, prevent, and respond to fraud, abuse, or security incidents
  • Comply with legal obligations

4. AI Processing

Prompts you submit and content generated by the Service may be sent to third-party AI providers (such as Anthropic, OpenAI, Google, Moonshot, or DeepSeek) to fulfill your requests. We do not use your prompts or generated content to train AI models.

5. Information Sharing

We do not sell your personal information. We may share information with:

  • Service providers: Hosting, payment processing, email delivery, AI inference
  • Legal compliance: When required by law, court order, or to protect our rights
  • Business transfers: If we are involved in a merger, acquisition, or sale of assets

6. Data Security

We implement industry-standard security measures: passwords are hashed with bcrypt, sensitive credentials are encrypted with AES-256-GCM, all traffic is served over HTTPS, and authentication tokens are signed and validated. No system is perfectly secure, but we work to protect your data.

7. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account at any time. Some data may be retained for legal, security, or business compliance reasons after account deletion.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal information. You may also opt out of non-essential communications. Contact us to exercise these rights.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

10. Children

The Service is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

12. Contact

For privacy questions or requests, please contact us.