What happens to your details.

Orlo is a trade name of Innovadea, registered in the Netherlands under KVK 42150287, VAT NL005536629B88. Innovadea decides what happens to the details you give on this website, and is responsible for them.

This page covers the Orlo website. The Orlo app is not open yet, and gets its own version of this page when it does.

• When you join the waitlist: your name and email address, and, if you give them, your company, your role, your team size, where your tickets live, the plan you are interested in, and whether you would like a founding place or a paid pilot.
• When you send a message: your name, email address, company if you give it, the topic and your message.
• To stop spam: when you send a form, we keep a scrambled version of your network address (a salted hash) for one day, to allow at most five tries an hour. We never store the address itself.

We do not count visits or use analytics at the moment. If that changes, we will name the tool here and say what it counts.

We use your waitlist details to contact you about early access, and your message to answer it. Both rely on your consent (Article 6(1)(a) of the GDPR): you give it by ticking the box on the form, and you can take it back at any time by asking us to delete your details.

The scrambled network address relies on our legitimate interest in keeping the forms free of spam (Article 6(1)(f)).

The database is hosted by Supabase in Frankfurt, inside the European Union. The website itself runs on Vercel. Emails are sent through Resend, from its EU region in Ireland.

This website runs on three service providers. Each one processes only what its job requires:

• Vercel hosts the website. Like any web host, it sees your network address when your browser asks for a page.
• Supabase stores the waitlist and the messages, and handles the admin sign-in.
• Resend delivers our emails to you and to us.

We do not sell your details, show ads or use them to train AI. This website does not use Google, Stripe or Anthropic. Even the fonts are served from our own address, so your browser does not contact Google.

• Waitlist entries: deleted 12 months after Orlo opens, or earlier if you ask.
• Messages: deleted 12 months after you send them, or earlier if you ask.
• The scrambled network address: deleted after one day.

This website does not put cookies on your device. The only cookie is the one that keeps the Orlo admin signed in, and it is only set for the admin. That is why there is no cookie banner.

You can ask for a copy of your details, ask us to correct or delete them, take back your consent, or object to how we use them. Use the contact page and we will act on it within a month.

If you are not happy with how we handle your details, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.

Use the contact page. A person reads it.