Privacy

Full privacy notice

1. Controller

The controller of your personal data is the company that operates ORIVUNEX, to be registered in the Republic of North Macedonia. Its name, address and register number are listed in section 2 of the terms of service once the registration is complete. Contact for all data protection questions: orivunexglobal@gmail.com.

2. What we process and why

• Account data: email, name or company name, country, account type, languages, the version of the terms you accepted and when. Needed to provide your account (contract).
• Your login password is handled by our login provider (section 4) and is never stored or seen by ORIVUNEX. If you turn on two-step login, we store the key for your authenticator app.
• Profile and listings: what you choose to publish, including descriptions, photos, logos, videos, prices and the countries you serve. Public once approved (contract).
• Business documents that companies upload for verification. Stored privately and seen only by authorised reviewers (legitimate interest in preventing fraud).
• Messages between members, and your choices about who may contact you and whom you blocked (contract).
• Alerts: the categories and countries you choose. Alerts are off until you turn them on (consent, which you can withdraw in Settings at any time).
• Activity: when you last logged in and, at most every few minutes, when you were last active. Used for security and to show rounded counts of active and online members per country on the world map. Countries with fewer than 5 such members are not shown, and no person, address or live location is ever shown (legitimate interest).
• Security records: logins, failed two-step codes, blocked files, staff decisions and other security events, and the network address of requests, for rate limits and to investigate abuse (legitimate interest in a safe platform).
• Orders of paid services, once they are offered: package, price, period and receipt (contract and legal obligations such as tax records). Card details are entered only with the payment provider and never reach ORIVUNEX.

3. Who can see your data

Other members see only what you publish and your public profile. Your email and phone number are never shown publicly. ORIVUNEX staff see data only as far as their role requires: reviewers see business documents, moderators see reported content, support sees account details. Every staff decision is logged.

4. Service providers

We use these providers to run ORIVUNEX. Each processes data only on our behalf and for this purpose:

• Supabase (Supabase Inc.): database, login and file storage. Data is stored in the European Union (Ireland).
• Namecheap (Namecheap Inc.): the server that runs the website, located in the United States, and the domain orivunex.com.
• Google (Google LLC): sends the emails for account confirmation, password resets and alerts.
• Let's Encrypt: issues the HTTPS certificate. It receives no member data.

When a payment provider is connected, it will be added here before any paid service can be ordered.

5. Transfers outside your country

The database is in the EU, while the web server and some providers are in the United States. Transfers to the United States rely on the providers' standard contractual clauses or an adequacy decision, where one applies. You can ask us for a copy of these safeguards.

6. How long we keep data

• Account, profile, listings and messages: while your account exists. After you ask for deletion, there is a 14-day period in which you can change your mind; then the account is deleted.
• Backups: kept for 14 days, so deleted data also disappears from backups within 14 days.
• Sent emails: the record of each email is removed after 90 days.
• Records of paid orders: as long as tax and accounting law requires, and only for that purpose.
• Security records: only as long as needed to protect the platform and investigate abuse.

7. Your rights

You can ask for access to your data, correction, deletion, restriction or a copy in a portable format, and you can object to processing based on legitimate interest. You can download your data and ask for deletion yourself in Settings. For anything else, write to orivunexglobal@gmail.com. You also have the right to complain to the Personal Data Protection Agency of the Republic of North Macedonia or to the data protection authority in your own country.

8. Security

All connections use HTTPS. Files are checked for viruses, staff accounts need two-step login and members can turn it on, repeated login attempts are limited, and backups are made every day. We will tell you without delay if a breach puts your data at risk.

9. Cookies

Only the cookies needed for login, language choice and protection against forged requests. No advertising, analytics or tracking cookies.

10. Changes

We will update this notice when the service or the law changes, show the date of the change, and tell members about important changes in advance.