Orvio Privacy Policy

• We only ask for what we need so you can book or offer a service.
• We do not sell your data. We use no advertising, no analytics tools and no third-party trackers.
• If you sign in with Google, we receive your name, email address, profile picture and an identifier for your Google account. We use them to create your account and sign you in.
• The operator you book with sees your name, your email and your messages, because they need them to serve you.
• You can ask to see, correct or delete your data by writing to info@orvio.do.

While the company that will operate the Orvio brand is being incorporated, the people who run the Orvio project are responsible for the processing of the personal data described in this policy; for any privacy matter, write to them at info@orvio.do. As soon as the company is incorporated, we will publish its legal name, RNC (Dominican taxpayer number) and registered address here and notify you by email.

Each operator is also responsible for how it uses the data it receives through Orvio to provide its service to you (for example, your name and email when you send it a request). The Terms of Use, which every operator accepts, require operators to use that data only to handle your booking.

If you have an account (travelers and operators)

• Account data: name, email address, preferred language and account type (traveler or operator).
• Acceptance of the legal texts: the version of the Terms of Use and of this policy you accepted, the date and time, the IP address and browser identifier (user agent) you accepted them from, and your confirmation that you are 18 or older.
• Password: if you sign up with email, your password is handled by our authentication provider and stored as a hash. Nobody at Orvio can see it.
• Sign in with Google: see section 4.

When you book

• The booking: service and listing, dates, amounts (operator's price, Orvio's commission, ITBIS, deposit, balance and late fee if any), status, and how the balance was paid.
• Booking history: a record of every change (request, acceptance, payment, cancellation, etc.), with the name of the person who made it (or their email, if their account has no name) and when. This history cannot be edited or deleted: it is the record of what was agreed.
• Your contact details on the booking: when you send a request, we copy your name and email onto the booking, as a record of who booked.
• Messages: the chat between you and the operator for each booking, and whether messages have been read.
• Transfer receipts: if you pay the balance by bank transfer, the reference and the file you upload (image or PDF). That file may show details of your bank account.
• Reviews: if you leave one, your rating (1 to 5 stars) and your comment.

If you are an operator

• Your business: business name, contact name, phone or WhatsApp, home base and description.
• Vetting data: cédula (national ID) or RNC, formality status, INTRANT licence number and status, insurance policy number, status and expiry date, and whether you can issue a comprobante fiscal (tax receipt).
• Bank details: bank, account type and number, account holder and the holder's cédula or RNC, so travelers can pay you the balance by transfer.
• Your listings: title, description, price, capacity, year, the illustrative image you choose, availability (including any notes you write when blocking dates), deposit percentage and late-payment policy.
• Review notes: what our team records while reviewing your application to operate on Orvio.

Other data

• Push notifications: if you turn them on, we store your device's technical subscription (an address at the notification service and its encryption keys) and your browser and operating system identifier (user agent), which may include your device model.
• Support and complaints: what you write to us, and incident records related to a booking.
• Technical data: our hosting and authentication providers log data such as your IP address, browser type and the date and time of access, to keep the service running and secure.

Sensitive data. We do not ask for health, religious, political or other sensitive data. Please do not include it in the chat.

Minors. Orvio is only for people aged 18 or over, and you confirm that you are before you use your account. If we find an account belonging to a minor, we close it and handle its data as described in section 10 (Deleting your account).

Some booking rules are applied automatically according to the policy the operator set; for example, an accepted request expires if the deposit is not paid on time, and the late-payment policy applies on its own when the balance falls due. The Terms of Use explain how.

What we don't do:

• We do not sell or rent your data.
• We do not show ads or share data with advertisers or data brokers.
• We do not send promotional emails today. If we ever do, we will ask for your permission separately, and you will be able to unsubscribe at any time.

If you choose “Continue with Google”:

What we receive from Google. We only request Google's basic identity permissions (openid, email and profile). Through them we receive your name, your email address, the address (URL) of your profile picture, an identifier for your Google account, and whether Google has verified your email. We never receive your Google password. We do not access your Gmail, contacts, calendar, Drive or any other Google service or data.

How we use it. To create your Orvio account, sign you in, and fill in your name and email on your profile. From then on, your name and email work like any other account data and are used only for Orvio features you use: the operator you send a request to sees your name and email, your first name appears if you publish a review, and we email you about your bookings. Orvio does not currently display your profile picture anywhere; it is stored with your sign-in data.

Who we share it with. The data we receive from Google is stored with our authentication and database provider (Supabase), which processes it on our behalf. Your name and email reach an operator only when you send that operator a request. We do not sell Google user data. We do not use it for advertising, we do not transfer it to advertisers or data brokers, we do not use it to determine creditworthiness, and we do not use it to train artificial intelligence models.

How we protect it. It travels encrypted (HTTPS). Your Google identifier, the address of your picture and your email verification status are seen only by authorized Orvio staff, when needed to support you, for security, or to comply with the law. Your name and email are shared only as this section explains.

How long we keep it and how to delete it. For as long as you have an Orvio account. If you ask us to delete your account, what happens to this data depends on whether you have made bookings; section 10 explains. You can remove Orvio's permission to access your Google account at any time at myaccount.google.com/permissions. Orvio does not use that permission after you sign in, so removing it does not change the data we already hold: if you choose “Continue with Google” again, Google will ask you to authorize us again. It also does not delete your Orvio account; to do that, write to us.

Limited Use. Orvio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Between traveler and operator

• When you send a request, the operator sees your name, email, the dates and your messages.
• You see the operator's business name, their listing and their messages.
• In each booking's history, both parties see the name of the person who made each change (or their email, if their account has no name). So the traveler may see the personal name of whoever manages the operator's account, or of the Orvio staff member involved, and the operator sees the traveler's.
• If you owe the balance on a confirmed booking, you will see the operator's bank details (bank, account type and number, account holder and the holder's cédula or RNC) so you can make the transfer. Only you, that operator and authorized Orvio staff can see the receipt you upload.

What is public on Orvio

• Listings: the illustrative image, description, price, area, availability and payment plan.
• About the operator: business name, description, how long they have been on Orvio, their rating and their reviews.
• The trust signals the operator declares: formality status (for example “Informal”, “Registered (RNC)” or “Company”), insurance status, INTRANT licence status, and whether they issue a comprobante fiscal.
• Reviews: rating, comment, the reviewer's first name, the service booked and the date.
• We never publish an operator's cédula or RNC, licence number, policy number, bank details or phone number, or any traveler's email or phone number.

Because of how the platform is built today, someone with technical knowledge can also look up: the internal identifier (a random code, not your name) of the account that wrote each review and of the booking it belongs to; and the blocked dates of listings, with the note the operator writes when blocking them, including for listings that are not yet published. That is why we ask operators not to write personal data in those notes. We plan to restrict this access and will update this policy when we do.

Orvio staff. Authorized Orvio staff can see accounts, bookings, messages, receipts and vetting data when needed to review operators, provide support, handle a complaint, prevent fraud or comply with the law. They must keep that data confidential (Law 172-13, art. 5(6)).

Providers that process data on our behalf

Google. If you choose to sign in with Google, Google processes your Google account data under its own privacy policy.

Authorities. We share data with the Dominican tax authority (DGII) when the law requires it; for example, in purchase, sales and withholding reports, which include the operator's identification and the amounts. We also share data with courts, Pro Consumidor (the consumer protection agency) or other authorities when they order it within their powers, or to defend a right in legal proceedings.

If Orvio changes hands. If Orvio merges, is sold or transfers its business, your data may pass to the new controller, who will be bound by this policy. We will tell you beforehand.

Our providers store and process data outside the Dominican Republic, mainly in the United States. This transfer is necessary to provide the service you ask for and to perform our contract with you (Law 172-13, art. 80(6) and art. 27(4)). We choose established providers that encrypt data in transit.

We only use what the site needs to work. We use no advertising, analytics or third-party cookies.

The site also installs a small script in your browser (a service worker) that is used only to receive push notifications. It does not store copies of pages.

During the pilot, nothing deletes data automatically: we keep data for as long as the pilot lasts and review it by hand. Before the pilot ends, we will set specific retention periods for each type of data and publish them here.

• Your account: while it is active. If you ask us to close it, see section 10.
• Record of your acceptance of the Terms and this policy: we keep it even if you close or delete your account, together with the account's email address, for as long as it may be needed to show what you accepted and when. We use it only for that.
• Bookings, their history, messages and receipts: for as long as the pilot lasts, to handle complaints and meet legal obligations. Records with tax relevance (amounts, dates, parties and operator identification) are kept for up to 10 years, as required by article 50(h) of the Dominican Tax Code (Law No. 11-92). A receipt you upload but never submit may remain stored; ask us if you want it deleted.
• Reviews: while they are published. If you close your account, your review may stay published with your first name; if you want it removed, ask us.
• Operators: vetting and bank data while the account is active. If you close your account, we keep only what is needed for tax and legal obligations, for up to 10 years. If we turn down your application to operate, you can ask us to delete your vetting and bank data.
• Push notifications: until you turn them off on that device, or until the push service tells us the subscription is no longer valid. Signing out does not turn them off (section 11).
• Technical data: according to our providers' retention periods.

When we no longer need data, we delete or anonymize it.

Law 172-13 gives you these rights:

• Access: to know what data we hold about you, what we use it for and who we share it with. We will answer within 5 business days (arts. 10 and 12).
• Rectification and update: to correct inaccurate or incomplete data. Within 10 business days (art. 8).
• Cancellation (deletion): to have your data deleted when it is no longer necessary or when you withdraw consent. Within 10 business days (art. 8), subject to the limits below and in section 10.
• Objection: to object to a specific use of your data, such as push notifications.

These rights are independent of each other (art. 9), and correcting or deleting your data is free of charge (art. 8). If we correct or delete data we have already shared with an operator, we notify that operator within 5 business days so they do the same (art. 8).

How to exercise them. Write to info@orvio.do from your account email. Tell us which right you want to exercise and which data it concerns. We may ask you to confirm your identity before we answer (art. 10). The platform does not have a page to edit your profile yet: to change your name, your email or the language of the emails we send you, write to us. Operators can update their business details and bank account from their dashboard. If you signed up with email, you can change your password with “Forgot password”.

Limits. We cannot delete what the law requires us to keep, or what is needed to protect other people's rights; for example, a booking with an open complaint (arts. 8 and 15). In that case we block the data: we keep it only for that purpose and delete it once the period ends.

If we don't answer. If we do not answer on time, or you disagree with our answer, you may bring a habeas data action before the courts (Law 172-13, art. 17 onward). For this purpose, our address is the one given in section 1.

If you have not yet accepted the current version of the Terms and this policy, have no bookings and are not an operator, you can delete your account on the spot with the “I don't accept: delete my account” button on the page that asks you to accept them. Otherwise there is no delete button in the platform yet: write to info@orvio.do from your account email and we will do it for you. Any bookings in progress must first be completed or cancelled.

• If you have never made a booking, we delete your account completely, including the data received from Google. We keep only the record of your acceptance of the Terms and this policy (section 8).
• If you have made a booking, we cannot currently delete your account without also deleting the record of those bookings, which we must keep (section 8). In that case we close your access so nobody can sign in with it again, and we delete your push notification subscriptions. We keep, for the periods in section 8: your closed account, with your name, your email and the data received from Google; your bookings, with the name and email stored on them; their history, which shows your name or email; and your messages. Once we can anonymize these accounts, we will also do it for accounts already closed and update this policy.
• If you are an operator, before the account is closed your fleet must be taken down and any pending bookings and payments resolved. Because your customers' bookings depend on your account, we close it and keep your data for the periods in section 8.

• The site always runs over an encrypted connection (HTTPS).
• Passwords are stored as hashes by our authentication provider.
• The database enforces per-user access rules: each person sees only their own bookings, messages and account data, plus what the other party to a booking needs to see (section 5).
• Operators' vetting data and bank details are not public. Bank details are shown only to a traveler who owes that operator a balance and to authorized staff.
• Transfer receipts are kept in private storage that only the two parties to the booking and authorized staff can access.
• Our staff only access what they need for their work.
• Signing out does not turn off push notifications on that device. If you share the device, turn them off before signing out: otherwise it will keep receiving alerts for your account, which may include the sender's name and a message excerpt.

No system is infallible. If a security incident affects your data, we will tell you without delay what happened and what you can do, and we will take steps to contain it.

If you share someone else's data (for example, a companion's name in the chat), make sure you have their permission.

If you travel with minors, share only what the service needs (for example, their ages, for life jackets or seating) and do not send photos or identity documents of minors in the chat.

If we change this policy, we will update the date above and let you know before the change takes effect, with a visible notice on Orvio stating that date. If a change is significant, we will also notify you by email at least 15 days in advance. If a change requires your consent, we will ask for it again.

For any question or request about your data: info@orvio.do. We will publish a postal address together with the company's details as soon as it is incorporated.