Privacy Policy

This Privacy Policy describes how Orevant ("Orevant," "we," "us") collects, uses, and shares information when you use orevant.com and the Orevant compliance platform (together, the "Services"). Questions: hello@orevant.com.

1. Information we collect

Information you provide. Account details (name, email address, organization name, password), water system identifiers you confirm or add (such as a PWSID), documents you choose to upload, and messages you send us. If you request a free lookup summary or use a gated free tool, we collect the name, email, and organization you enter.

Public regulatory data. Water system profiles, violation records, and regulatory information displayed in the Services originate from public sources, primarily the U.S. EPA Safe Drinking Water Information System (SDWIS) and state primacy agency records. This data is public regardless of Orevant.

Information collected automatically. Log data (IP address, browser type, pages viewed, timestamps) and cookies. We use cookies for authentication and session security, and — on our public web pages (including the login and signup pages) — Google advertising and analytics tags (Google Ads / gtag) that set third-party cookies to measure ad performance and conversions. See "Cookies and advertising" below.

2. How we use information

To provide and secure the Services; to generate compliance scans, calendars, and alerts for your water system; to respond to support requests; to send transactional email (receipts, password resets, compliance notifications, requested summaries); to measure and improve the Services and our advertising; and to comply with law. If you request a lookup summary or use a free tool, we may follow up by email about Orevant; you can opt out of non-transactional email at any time via the link in the email or by writing to us.

3. Cookies and advertising

Our public web pages load Google tags (Google Ads, tag AW-18390436939) that use third-party cookies and similar technologies to measure conversions and improve ad delivery. Google's use of this data is described in Google's privacy & terms. You can opt out of personalized Google advertising at adssettings.google.com. Authenticated application pages (/app) use first-party session cookies only.

4. Sharing

We do not sell personal information. We share information only with: (a) service providers that host and operate the Services (e.g., cloud hosting, Stripe for payment processing, email delivery) under confidentiality obligations; (b) Google, for the advertising measurement described above; (c) authorities when required by law; and (d) a successor entity in a merger or acquisition. Water system data belonging to your organization is never shared with other customers, and Orevant does not automatically submit your account information, uploaded records, or findings to regulators.

5. Payment information

Payments are processed by Stripe. Orevant does not store full card numbers. Stripe's handling of your payment data is governed by Stripe's privacy policy.

6. Data retention and deletion

We retain account data while your account is active and as needed for legal, accounting, and audit purposes. When a subscription ends, your records remain associated with your account so you can export them or resubscribe. You may request export or deletion of your organization's data at any time by emailing hello@orevant.com; we will act on verified requests within 30 days, subject to records we must keep by law.

7. Security

We use industry-standard safeguards: encrypted transport (HTTPS/HSTS), hashed passwords, hashed session tokens, tenant isolation between organizations, rate limiting, and audit logging. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your choices and rights

You can access and update account information in the app, unsubscribe from non-transactional email, and request access, correction, export, or deletion of your personal information by emailing us. Depending on your state of residence, you may have additional rights under state privacy laws; we honor verified requests regardless of state.

9. Children

The Services are for professional use and are not directed to children under 16. We do not knowingly collect information from children.

10. Changes

We will post any changes to this policy on this page and update the date above. Material changes will be announced by email or in-app notice.

Contact: Orevant · hello@orevant.com