Privacy Policy
Effective Date: October 24, 2023
At Orthy ("we," "our," or "us"), we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of your information when you use our website, mobile application, and services (collectively, the "Service").
1. Information We Collect
We collect information to provide better services to all our users. The types of information we collect include:
Account Information: When you sign up, we collect your email address, name, and team name.
Authentication Data: We store encrypted 2FA secrets. These are encrypted client-side using zero-knowledge architecture, meaning we cannot access the raw secrets.
Usage Logs: We collect audit logs of who accessed which code and when, to provide security visibility to team admins.
Device Information: We collect information about the device you use to access Orthy, including the hardware model, operating system and version, and unique device identifiers.
2. How We Use Information
We use the information we collect to operate, maintain, and improve our services, such as:
Processing transactions and sending related information, including confirmations and invoices.
Sending you technical notices, updates, security alerts, and support and administrative messages.
Responding to your comments, questions, and requests and providing customer service.
Monitoring and analyzing trends, usage, and activities in connection with our Services.
3. Data Security
We implement industry-standard security measures to protect your data. Your 2FA secrets are encrypted using AES-256 before they leave your device. We utilize TLS 1.3 for data in transit and keep data at rest encrypted in SOC2 compliant data centers.
Terms of Service
By accessing or using the Orthy website and services, you agree to be bound by these Terms of Service. If you disagree with any part of the terms, then you may not access the Service.
Use License
Permission is granted to temporarily download one copy of the materials (information or software) on Orthy's website for personal, non-commercial transitory viewing only. This is the grant of a license, not a transfer of title.
Disclaimer
The materials on Orthy's website are provided on an 'as is' basis. Orthy makes no warranties, expressed or implied, and hereby disclaims and negates all other warranties including, without limitation, implied warranties or conditions of merchantability, fitness for a particular purpose, or non-infringement of intellectual property or other violation of rights.
Data Processing Agreement (DPA)
For customers in the EU/EEA, UK, and Switzerland, or other regions with specific data protection laws, we offer a Data Processing Agreement (DPA).
Our standard DPA is pre-signed and available for your records. It incorporates Standard Contractual Clauses (SCCs).
If you require a custom DPA or have specific compliance requirements, please contact our legal team at legal@orthy.io.
Cookie Policy
We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic. By clicking "Accept All", you consent to our use of cookies.
Types of Cookies We Use
Essential - Necessary Cookies: Required for the website to function properly. You cannot opt-out of these.
Analytics - Performance Cookies: Help us understand how visitors interact with the website.
You can manage your cookie preferences at any time through your browser settings or by clicking the "Cookie Preferences" link in the footer.
Still have questions?
If you cannot find the answer to your question in our policy documents, please contact us directly.