Information We Collect
orivantalios collects various types of information to provide you with our budget approval workflow services and improve your experience. We're transparent about what we collect and why we need it.
Personal Information You Provide
- Account Information: Name, email address, phone number, and company details when you register for our services
- Profile Data: Job title, department, organizational role, and preferences you set within your account
- Communication Records: Messages sent through our platform, support tickets, and correspondence with our team
- Financial Data: Budget information, approval limits, and transaction records related to your workflow processes
Information We Collect Automatically
When you use orivantalios's services, we automatically collect certain technical information to ensure optimal performance and security. This includes your IP address, browser type, operating system, and device identifiers. We also track how you interact with our platform - which features you use, pages you visit, and time spent on different sections.
Cookie Usage: We use cookies and similar technologies to remember your preferences, keep you logged in, and analyze platform usage. You can control cookie settings through your browser, though some features may not work properly if cookies are disabled.
How We Use Your Information
The information we collect serves specific purposes that directly benefit your experience with orivantalios's budget approval workflow platform.
- Service Delivery: Processing budget approvals, managing workflow automation, and providing core platform functionality
- Account Management: Creating and maintaining your account, authenticating your identity, and managing access permissions
- Communication: Sending service updates, responding to support requests, and delivering important notifications about your workflows
- Platform Improvement: Analyzing usage patterns to enhance features, fix bugs, and develop new functionality
- Compliance & Security: Monitoring for fraudulent activity, ensuring regulatory compliance, and maintaining platform security
Legal Basis for Processing
Under Canadian privacy legislation, we process your personal information based on legitimate business interests, contractual necessity, and your consent where required. For sensitive financial data, we rely on explicit consent and regulatory requirements that govern financial service platforms.
Information Sharing and Disclosure
orivantalios follows strict guidelines regarding when and how we share your personal information. We never sell your data to third parties for marketing purposes.
Service Providers and Partners
We work with carefully selected service providers who help us deliver orivantalios's services. These include cloud hosting providers, payment processors, and security monitoring services. All partners sign comprehensive data processing agreements that require them to protect your information and use it only for specified purposes.
- Cloud infrastructure providers for secure data storage and platform hosting
- Payment processors for handling subscription billing and financial transactions
- Security services for threat detection and platform monitoring
- Analytics providers for understanding platform usage and performance
Legal Requirements
We may disclose your information when required by Canadian law, court order, or government request. This includes compliance with tax authorities, financial regulators, and law enforcement agencies when they have proper legal authority. We'll notify you of such requests unless legally prohibited from doing so.
Business Transfers: If orivantalios is acquired, merges with another company, or undergoes significant business changes, your information may be transferred as part of that transaction. We'll provide advance notice of any such changes and how they might affect your privacy rights.
Your Privacy Rights
As a orivantalios user, you have comprehensive rights regarding your personal information. We've made it easy to exercise these rights through your account settings and our support channels.
Access and Portability
You can access most of your personal information directly through your orivantalios account dashboard. For a complete copy of all data we hold about you, submit a data access request through our support system. We'll provide this information in a commonly used, machine-readable format within 30 days.
Correction and Updates
Keep your information accurate by updating your profile directly through your account settings. If you notice any errors in data you cannot edit yourself, contact our support team with the correct information, and we'll update our records promptly.
- Right to Deletion: Request deletion of your personal information, subject to legal and contractual retention requirements
- Processing Restrictions: Ask us to limit how we process your information in certain circumstances
- Objection Rights: Object to processing based on legitimate interests, particularly for marketing communications
- Withdrawal of Consent: Revoke consent for specific processing activities where consent is the legal basis
Filing Complaints
If you're unsatisfied with how we handle your privacy concerns, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada or your provincial privacy authority. We encourage you to contact us first so we can address your concerns directly.
Security and Data Protection
orivantalios implements robust security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our security approach combines technical safeguards, organizational policies, and regular monitoring.
Technical Safeguards
- End-to-end encryption for data transmission using industry-standard TLS protocols
- Advanced encryption for stored data with regularly rotated encryption keys
- Multi-factor authentication requirements for account access and administrative functions
- Regular security audits and vulnerability assessments by independent security firms
- Automated monitoring systems that detect and respond to potential security threats
Organizational Security
Our team receives regular privacy and security training. Access to personal information is limited to employees who need it for their job functions, and all access is logged and monitored. We maintain incident response procedures to quickly address any potential security breaches.
Breach Notification: In the unlikely event of a data breach that poses risks to your privacy, we'll notify affected users within 72 hours of discovering the incident and provide clear information about what happened and steps we're taking to address it.
Data Retention and Deletion
We retain your personal information only as long as necessary to provide services, comply with legal obligations, and resolve disputes. Different types of information have different retention periods based on their purpose and regulatory requirements.
Retention Periods
- Account Information: Retained while your account is active, plus 3 years after closure for compliance purposes
- Transaction Records: Kept for 7 years to meet financial record-keeping requirements under Canadian law
- Communication Logs: Stored for 2 years for customer service quality and dispute resolution
- Technical Logs: Automatically deleted after 1 year unless needed for security investigations
Deletion Procedures
When retention periods expire or you request deletion, we securely remove your information from our active systems. Backup copies may persist for additional months before automatic deletion, but this information is not accessible for normal business operations. Some information may be retained longer if required by legal holds or ongoing regulatory investigations.
International Data Transfers
orivantalios primarily stores and processes your information within Canada using Canadian data centers. However, some of our service providers may process information in other countries with equivalent privacy protections.
Cross-Border Processing
When we transfer your information outside Canada, we ensure appropriate safeguards are in place. This includes using service providers in countries with adequate privacy laws or implementing contractual protections that meet Canadian privacy standards. The United States and European Union are our primary locations for any cross-border processing, both of which have recognized privacy frameworks.
Your Control: If you prefer to limit international transfers of your data, contact our privacy team to discuss available options. While this may limit some platform features, we'll work with you to find suitable alternatives where possible.