This explains what Orvo stores, why it stores it, and how to have it removed. Last updated 12 September 2026.
Orvo is operated by MHI Media. If you have a question about anything here, or want your data removed, email privacy@mhimedia.com.
We use it to run the service for you, and for nothing else. We do not sell it, we do not share it with advertisers, and we do not use your content or your connected account data to train anyone's models.
Text you ask the app to write or rewrite is sent to Anthropic's Claude API to produce that text, and is not used to train their models.
Looking up a lead's company. If someone in a workspace asks the app to find out about a lead, the domain from that lead's email address (the part after the @) is sent to Anthropic's Claude API, which searches the public web and returns what it finds about the company: what they do, their sector, roughly how big they are, where they are, anything notable they have announced, and the company's own published contact route. The result is stored against that lead in the workspace that collected it.
This looks up the company, never the person. The app does not search for an individual's personal contact details, social profiles or anything about their life outside work, and it does not build a profile of them. If the email address is a personal one (gmail, outlook and the like) there is no company to look up and nothing is searched for. No part of a lead's name, message or other details is sent — only the domain.
When you connect an account we use it for two things only: to publish the posts you schedule from Orvo, to the accounts you pick, at the time you pick; and to read the performance of those posts so you can see your own numbers. We keep the access token and those numbers only while the account stays connected. Disconnect it on the Social accounts page and the stored token and metrics are deleted straight away. We never post without you pressing the button, and we never read messages, comments or anyone else's data.
Everything travels over HTTPS. Access tokens for connected accounts are encrypted before they are stored, and are never sent to a browser. Signing in is handled by Google, so we hold no passwords of yours. Access to the app is limited to people who have been invited to it.
If you are in the UK or the EU you can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email privacy@mhimedia.com. You can also complain to the Information Commissioner's Office.
If this changes in a way that matters, we will tell the people it affects rather than quietly updating the date.