ORYVA FORGE
Privacy Policy
Last updated: 22 October 2026
This Privacy Policy explains how ORYVA AI PRIVATE LIMITED ("ORYVA", "we", "us") collects, uses and protects personal data when you use ORYVA Forge at forge.oryvaai.com and related services (the "Platform"). It applies to members, mentors and visitors.
4.1 Data we collect
| Category | What |
|---|---|
| Account | Name, email address, and how you sign in (Google, GitHub, email code or password). From Google or GitHub we receive your name, email address, profile photo and whether your email is verified, never your password. |
| Profile | Phone number, city, background (e.g. student, professional), interests and domains, skills, goals and portfolio link, as you enter them. |
| Membership and payments | Your plan, its status and dates; each payment's amount, GST, status, date and the Razorpay reference. Card, UPI and bank details are entered on Razorpay's secure checkout and are not stored by ORYVA. |
| Workshops | Registrations, payment status, attendance and access to recordings. |
| Mentorship | Your mentorship requests (topic, category, domains, what you need help with), the mentor matched to you, scheduled meetings, session records, the session notes your mentor shares with you, and feedback you give. |
| Mentors (additionally) | Application details (role, summary, experience, expertise, location, quoted rate, photo and links), agreed rate, sessions and earnings, TDS and payouts, and bank account details, which are stored encrypted and visible only to authorised finance staff. If a mentor connects Google Calendar, we store an encrypted access token to create meetings and check free/busy times. |
| Communications and support | Messages you send through forms and support requests, and records of emails we send you. |
| Technical | Your IP address and browser type when you use the Platform. We keep IP addresses only in a hashed (one-way) form for security and rate limiting. |
4.2 How we use it
- To create and secure your account, and sign you in.
- To provide memberships, workshops, mentorship, programs and the Fellowship pathway, including matching you with a mentor and scheduling sessions.
- To take payments, apply discounts and credits, issue receipts and keep accounts and tax records.
- To pay mentors (earnings, TDS, payouts).
- To send service emails: sign-in codes, confirmations, receipts, reminders and updates about your requests.
- To prevent fraud and abuse, enforce our Terms and keep the Platform secure.
- To improve the Platform. We do not sell your personal data, and we do not use it for third-party advertising.
We process your data to provide the services you sign up for, with your consent where we ask for it (for example on forms), and where the law requires or permits it. You can withdraw consent at any time (section 4.6); this doesn't affect processing already done.
4.3 Who sees your data
- Your mentor sees your name, contact details, background and request once they accept your mentorship, never your payment details.
- ORYVA staff see what they need for their role; only authorised staff see payments and mentor bank details.
- Service providers who process data for us under contract: Google Cloud (hosting and database, in Mumbai, India) and Google Workspace (email); Razorpay (payments); Google and GitHub (sign-in, if you choose them) and Google Calendar/Meet (mentor meetings); Hostinger (website hosting).
- Authorities, when the law requires it.
4.4 Where it is stored
Your data is stored in India (Google Cloud, Mumbai region). Some service providers may process limited data outside India under appropriate safeguards.
4.5 How we protect it
Data is encrypted in transit (HTTPS). Mentors' bank account numbers and Google tokens are additionally encrypted in our database. Passwords are stored only as secure hashes. Admin accounts sign in with one-time email codes, and access is limited by role and logged.
4.6 Your rights
You can ask to access, correct, update or delete your personal data, or withdraw consent, by writing to support@oryvaai.com or the Grievance Officer (section 4.10). You can edit most profile details yourself in your account. Some records (for example payment and tax records) must be kept for the period the law requires even if you close your account.
4.7 How long we keep it
We keep your data while your account is active. If you do not take part for 180 days, your account is archived. To use it again, you can create a new account, or continue with the archived one by taking a membership plan. If a membership is not renewed, you have 30 days after it ends, after which the account is no longer active. We may keep some records for longer where the law requires it (for example, financial records for at least 8 years). Sign-in codes and links expire within minutes to hours and are deleted after use.
4.8 Cookies
The Platform uses an essential, secure, HTTP-only cookie to keep you signed in, and a short-lived cookie during Google or GitHub sign-in. We do not use advertising cookies.
4.9 Children
The Platform is for people aged 12 and over. If you are under 18, you may use it only with the consent of a parent or legal guardian, who is responsible for your use of it and any payment made.
4.10 Grievance Officer and contact
Grievance Officer: Sowmya, grievance@oryvaai.com, ORYVA AI PRIVATE LIMITED, 8-4/176/A1, Siri Enclave, Rose Garden Street, Rampally, Hyderabad 501301, India. We will acknowledge your complaint within 48 hours and resolve it within the time the law sets.
4.11 Changes
We will post any changes on this page with a new "Last updated" date, and ask for your consent again where the change requires it.