Not always. For most information you keep in ORIVYS about staff, students, members, or service users, your organisation is the data controller and Exoter Technologies Ltd acts as a processor, following your instructions. Exoter is the controller for things like account registration, billing, support messages, and marketing preferences. The full detail is in our Privacy Policy. Read the Privacy Policy.

It depends how you use the platform. That can include account details (names, emails, phone numbers, roles), operational records your organisation enters, technical data such as IP address and login activity, and payment-related information handled with our payment provider (card details are not stored by us). In some deployments this may include data about children or special category data, which is processed only on your instructions as controller. Read the Privacy Policy.

The service runs on Google Cloud Platform in the London (United Kingdom) region. We also use trusted providers such as Stripe for payments and MailerSend for transactional email, under contracts that meet data protection requirements. Sub-processor information is summarised in the Privacy Policy. Read the Privacy Policy.

If a trial does not become a paid subscription, data may be kept for up to three months and then deleted or anonymised. For active subscriptions, data is kept for the life of the subscription. After termination, data is typically held for up to forty-five days (restoration may be possible in that window, subject to the Terms), then it may be permanently deleted. Backups may persist for a limited extra period. The Privacy Policy and Terms describe retention in full. Read the Privacy Policy.

If Exoter is the controller for the data (for example account or billing information), contact support@exoter.tech. If the data is held in ORIVYS on behalf of your organisation, you should contact your organisation first, since they are usually the controller. You also have the right to complain to the UK Information Commissioner’s Office (ICO). See the Privacy Policy for the list of rights and how to use them. Read the Privacy Policy.

If a transfer outside the UK or EEA is needed, we put appropriate safeguards in place, such as Standard Contractual Clauses or equivalent mechanisms, as described in the Privacy Policy. Read the Privacy Policy.

Your relationship with Exoter Technologies Ltd is set out in the ORIVYS Terms and Conditions, together with any order form, the Service Level Agreement where applicable, and the Data Processing Agreement (DPA) for UK GDPR / EU GDPR processing. Together they cover access to the service, trials, subscriptions, data protection, and liability. Read the Terms and Conditions and the Data Processing Agreement.

We may offer a trial of up to twenty-eight days. You can cancel during the trial without charge. Unless you cancel before the trial ends, your subscription can convert automatically to a paid plan as described in the Terms. That arrangement is intended to be clear and fair under UK consumer rules. Read the Terms and Conditions and the Data Processing Agreement.

You are responsible for managing users and credentials, for the accuracy and lawfulness of data you enter, and for meeting your own safeguarding, regulatory, and operational duties. You must comply with applicable law, including data protection requirements. Processor processing by Exoter is described in the DPA, which forms part of the Terms. Read the Terms and Conditions and the Data Processing Agreement.

Exoter may update or improve ORIVYS provided core functionality is not materially reduced during an active subscription term. Subscription fees may change on reasonable notice and usually take effect at the next renewal. The Terms may be updated from time to time. The published Terms on our website are the place to check the current version. Read the Terms and Conditions and the Data Processing Agreement.

You may cancel as set out in the Terms (for example monthly plans at the end of the current billing period). Cancellation should be done through the service or in writing. Stopping payment alone is not valid cancellation. If payment fails, we may retry, notify you, then suspend or terminate after notice. After termination, customer data is typically kept for a limited period (often up to forty-five days), then it may be deleted. Restoration in that window can be at our discretion and may require payment of outstanding fees. Read the Terms and Conditions and the Data Processing Agreement.

You must not misuse the service, attempt unauthorised access, or use ORIVYS in breach of applicable laws or regulations. The Customer indemnifies the Supplier against claims arising from unlawful use, regulatory breaches, or infringement through customer data, as set out in the Terms. Read the Terms and Conditions and the Data Processing Agreement.