Privacy Policy

1. Scope

Orek (“we”) provides a booking widget and dispatch workspace. This policy covers orek.live, orek.vercel.app, and the widget loaded from those origins. Your own website and your passenger fleet terms are separate. Contact: info@orek.live.

2. Operators (you)

When you subscribe or sign in, we collect:

• Name, work email, password hash, company name, phone, and fleet settings you enter
• Billing name, email, plan, amount, and Flutterwave transaction references — not full card numbers
• Session cookies so Dispatch stays signed in
• Server logs (IP, user agent, time) needed to run and secure the app

3. Guests on your widget

If someone chats or books on your site, we store what they type: trip details, name, email, phone, and conversation messages, tied to your company. We use that to quote, create the reservation, email confirmations, and notify your dispatch inbox. You decide what to ask for. We process that data for you as a service provider. Do not use the widget to collect data you are not allowed to hold.

4. How we use information

• Run the workspace, widget, quotes, bookings, and email alerts
• Bill subscriptions and extend access after Flutterwave confirms a charge
• Support your account, including when our staff opens your desk at your request
• Keep the service secure and diagnose outages

We do not sell personal information. We do not send SMS.

5. Processors

We use vendors who only see what they need to do their job:

• Vercel — hosting
• Supabase / PostgreSQL — database
• Flutterwave — card checkout and recurring charges
• Resend (or SMTP you configure) — transactional email
• Nominatim or Google Maps, if an address is geocoded

6. Cookies

HttpOnly session cookies identify an operator (`orek_session`) and, for our staff, an admin session (`orek_admin`). The public marketing site does not require an account cookie. The widget may use browser storage on your site so a guest does not lose a half-finished trip.

7. Retention

Operator accounts and booking history stay until you ask us to delete the workspace, or we close an unpaid or abusive account. Payment records are kept as long as needed for accounting and dispute windows. Logs rotate in the ordinary course of hosting.

8. Your rights

Email info@orek.live to access, correct, or delete operator data we hold, or to export a workspace. Guests should contact the fleet they booked with first; we will help the operator fulfill a valid request. If you are in a region with additional privacy laws, we will honor rights that apply to us as a processor or controller.

9. Children

Orek is for business customers. It is not directed at children under 16.

10. Changes

We will post updates on this page. Continued use after a material change means you accept the new policy, except where the law requires consent.