Privacy Policy

1) Scope

This policy covers:

• Website visitors (onivor.com)
• People who contact Onivor (WhatsApp, email, forms)
• Clients who share materials for a project ("Project Data")

2) Information Collected

A. Information provided directly

Onivor may collect:

• Contact details (name, email, phone number, company name)
• Messages and requests sent via WhatsApp, email, or forms
• Project Data (briefs, content, files, credentials, access tokens) provided for delivery

B. Information collected automatically

Onivor may collect limited usage data such as:

• Approximate location (country/city), device type, browser type, referring page
• IP address (stored in truncated or hashed form when possible)
• Basic security logs (rate limiting, abuse prevention)

C. Cookies and analytics

Onivor may use cookies or similar technologies for:

• Essential site functionality
• Anonymous analytics (to understand page usage and improve performance)

Browser settings can be used to block or delete cookies. Some features may not work properly if cookies are disabled.

3) How Information Is Used

Information is used to:

• Respond to inquiries and provide requested information
• Deliver services and manage projects
• Improve site performance, reliability, and user experience
• Maintain security, prevent fraud, and enforce policies
• Comply with legal obligations

Onivor does not sell personal information.

4) AI Processing (Client and Inquiry Data)

Onivor may use AI tools to accelerate internal workflows (research, drafting, testing, documentation) while maintaining human review and accountability.

Controls:

• Only the minimum necessary information is processed.
• Sensitive data can be minimized, redacted, or excluded when feasible.
• Upon request during the audit or onboarding, Onivor can follow a "no external AI tools" workflow for project materials, subject to feasibility and scope.

Training:

• Project Data is not used to train Onivor models.
• If third-party AI tools are used, available vendor settings to reduce retention or training are applied when feasible.

5) Sharing of Information

Onivor may share information only as needed with:

• Service providers (hosting, analytics, email, project tooling) under appropriate safeguards
• Contractors (only if engaged for delivery and bound by confidentiality)
• Legal authorities if required by law, subpoena, or to protect rights and safety

Project Data is never shared publicly without explicit client permission.

6) International Processing

Some service providers may process data outside Indonesia. Onivor limits shared data to what is necessary and uses reputable providers with security safeguards.

7) Data Retention

Onivor retains information only as long as needed:

• Inquiry messages: typically up to 12 months
• Project Data: for the project duration and a reasonable post-delivery period (typically up to 24 months) unless the client requests earlier deletion
• Security logs: typically 30 to 90 days

Longer retention may apply when required for legal, tax, or dispute purposes.

8) Security

Onivor uses reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is fully secure, so absolute security cannot be guaranteed.

9) Choices and Requests

Depending on applicable law, requests may be made to:

• Access, correct, or delete personal information
• Withdraw consent for non-essential processing (where applicable)
• Opt out of non-essential cookies (via browser settings)

10) Children

The Service is not intended for children under 13, and Onivor does not knowingly collect personal information from children.

11) Changes to This Policy

This policy may be updated from time to time. The "Last Updated" date will reflect the latest revision.

12) Contact

For privacy questions or requests, contact:

• Email: privacy@onivor.com
• Website: onivor.com