Orvion

Legal

Privacy Policy

ORVION runs on your own computer. Your business information stays on that computer, and ORVION operates no service that receives it.

Last updated 14 October 2026.

The short version

ORVION is installed software, not a hosted service. The application listens only on your own machine at 127.0.0.1 and is never exposed to the internet. Your business profile, documents, approvals, receipts, audit trail and any credentials you supply are written to files on that machine.

We do not receive your business data. There is no ORVION database of customer records, because there is no ORVION server in the path of your work.

Information ORVION holds, and where

Everything in this section is stored on your own machine, inside a workspace that belongs to one business. Separate businesses in the same installation are kept in separate workspaces and cannot read each other.

  • The business profile and settings you enter.
  • Work ORVION performs for you: analyses, drafts, tasks and reports.
  • Approvals you grant or refuse, and the receipts and audit records that follow them.
  • Credentials and access tokens for the accounts you choose to connect, held in a sealed local store. They are never returned to a screen, written to a log, or included in a report.
  • Your sign-in details for the local application, stored as a password hash rather than a password.

Accounts you connect

ORVION can connect to services you already use — accounting, payments, commerce, email, calendar, documents and social accounts. Three rules apply to all of them.

  • You authorize each one, individually. Connecting one service never connects another, and each connection belongs to one business workspace.
  • ORVION asks for the narrowest access that does the job. Where a provider offers a read-only permission, ORVION requests that one.
  • Nothing consequential happens without your approval. Actions that reach outside ORVION and change something are proposed to you, executed only if you approve, and recorded with a receipt.

You can disconnect any connected account from within ORVION at any time. Disconnecting one does not affect the others.

QuickBooks and other accounting connections

If you connect QuickBooks, ORVION requests Intuit's accounting permission (com.intuit.quickbooks.accounting) and uses it to read information from the company you select — beginning with the company's own details, in order to confirm the connection works. ORVION does not request Intuit's payments permission, and does not write to your books.

The resulting access is stored on your machine, in the workspace of the business you connected it to. It is not transmitted to ORVION, and it is not shared with any other party.

The one thing that does pass through our servers

Some providers will not return an authorization to software running on your own computer. They require a public address secured with HTTPS. For those, ORVION operates a single small service at auth.orvionbos.com whose only job is to receive that return and hand the result to your installation.

That service is deliberately limited:

  • It holds one authorization in progress, for minutes, and destroys it once used or abandoned.
  • It stores no business data, and keeps no copy of your access once your installation has collected it.
  • It records only that an authorization happened, for which provider and with what outcome. It does not record credentials, tokens, authorization codes, or who you are.
  • It cannot reach your machine. It returns your own browser to your own computer; it never connects inward.

This website

These pages are static files, with no advertising. If you allow it, we use Google Analytics 4 to count visits: which pages are read, how visitors arrived, and their approximate country and device type. Google Analytics sets its own cookies and processes this information for us under Google's terms. Nothing is loaded from Google, and no analytics cookie is set, unless you choose "Allow"; "Decline" is remembered in your browser. Our content security policy permits only this site's own files and Google Analytics, so no other tracker could run here even if one were added by mistake.

Our hosting provider processes ordinary web-server request information, such as IP address and browser type, in order to serve the page and protect the service.

Sharing

We do not sell your information and we do not share it for advertising. Because your business data stays on your machine, there is nothing of that kind for us to share.

When ORVION performs work using an AI provider, only the material needed for that task is sent to it, on your instruction. Which providers are available, and whether they are used at all, is configured in your own installation.

Retention and deletion

Because your data is stored on your machine, you control how long it is kept. Deleting a business workspace, or uninstalling ORVION, removes the data with it. Disconnecting a provider removes the stored access for that provider from your workspace.

Children

ORVION is business software and is not directed to children.

Changes

If this policy changes, the updated version will be published on this page with a new date above.

Contact

If you have a question about this policy or about information ORVION holds, contact us through the account you use with ORVION.