Privacy Policy

Last updated: 8 May 2026

Oliviat-Autonomy (“we”, “us”, or “our”) operates Orvian Studios (“the Service”). This Privacy Policy explains how we collect, use, and protect your personal information.

1. Information We Collect

Information you provide

  • Account information (name, email address) via Clerk authentication
  • Payment information processed by Stripe (we never store raw card data)
  • Content you upload or generate using the Service (images, videos, audio)
  • Social media account connections (OAuth tokens, stored encrypted)

Information collected automatically

  • Usage data (features used, credits consumed, job history)
  • IP address and browser information for security and rate limiting

2. How We Use Your Information

  • To provide, operate, and improve the Service
  • To process payments and manage your subscription
  • To publish content to social media platforms on your instruction
  • To send transactional emails (account activity, billing receipts)
  • To detect and prevent fraud, abuse, and security incidents

3. Data Storage and Security

Your data is stored on secure infrastructure including Neon (PostgreSQL database), Cloudflare R2 (media storage), and Upstash (job queue). Social media OAuth tokens are encrypted at rest using AES-256-GCM. We implement industry-standard security practices and access controls.

4. Third-Party Services

We use the following third-party services to operate Orvian Studios:

  • Clerk — authentication and user management
  • Stripe — payment processing
  • Cloudflare — media storage and CDN
  • FAL.ai / ElevenLabs / HeyGen — AI processing (your content is processed per their privacy policies)
  • YouTube, TikTok, Instagram, Facebook, X, LinkedIn — social publishing (only when you explicitly connect and use these features)

5. Data Sharing

We do not sell your personal data. We share data only with the third-party services listed above as necessary to provide the Service, and when required by law.

6. Social Media Connections

When you connect a social media account, we store an encrypted OAuth access token to publish content on your behalf. We only post content that you explicitly submit for publishing. You can disconnect any social account at any time from your dashboard, which revokes our access.

7. Data Retention

We retain your account data for as long as your account is active. Generated media assets are retained until you delete them or close your account. If you close your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict certain processing

To exercise these rights, contact us at privacy@orvianstudios.ai.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

10. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice.

12. Contact

For privacy-related enquiries, contact us at privacy@orvianstudios.ai.