Privacy Policy

Version 1.3 · Effective October 25, 2026 · Operated by ORVEXIA Technologies LLC

1. Who we are and what this policy covers

This Privacy Policy explains how ORVEXIA Technologies LLC ("ORVEXIA", "we", "us") collects, uses, shares and protects personal information when you use ORVEXIA ABA Professionals (the "Product"), including the website https://bcbazone.com and related support. ORVEXIA is the business responsible for (the "controller" of) the personal information described here, except where we process data on behalf of a business customer, as explained under “Business customers”.

2. Information we collect

Depending on how you use the Product, we collect the following categories of personal information:

• Contact details (name, email address, phone number)
• Account credentials and profile information (login identifiers, authentication method, preferences)
• Sign-in data received from Google or Apple when you choose those options (name, email, provider identifier)
• Study progress, practice and mock-exam results, goals and certification path
• Purchase records (product, amount, date, access period and status). All purchases are one-time payments, never subscriptions. Card details are handled by Stripe; we never receive or store card numbers
• Prompts, text or files you submit to the AI study assistant. They are sent to Google to generate the reply; we do not store your conversations, only a record that a request happened so we can apply usage limits
• Usage and device information (browser and operating system, IP address, pages or features used, error logs) and, when you sign in, a random device identifier and the device type (phone or computer) so we can apply the limit of two devices per account
• Messages you send to support and the content of forms you submit (contact form, newsletter sign-up)
• Reviews you choose to submit (name, role, rating and text), which we publish on the website only after we approve them
• A record of each consent you give (date and time, the versions of the Terms and this Policy you accepted and a fingerprint of their text, the form and page, your language and your email), kept so we can prove it

Sources. We collect this information directly from you, automatically from your device when you use the Product, and from the services you choose to connect (for example a sign-in provider or a payment processor). We do not buy personal information from data brokers.

Sensitive information. We do not ask for sensitive personal information (such as health, biometric, racial or religious data) to use this Product. Please do not include it in free-text fields or AI prompts.

3. How we use information

• Provide, operate and maintain the Product and the features you request
• Create and secure your account, authenticate you and prevent fraud and abuse
• Process one-time payments, grant and manage the access you purchased and keep purchase records
• Respond to your requests and provide support
• Send service messages (security alerts, receipts, changes to terms). Marketing emails are sent only if you opt in, and every one includes an unsubscribe link
• Understand usage in aggregate to fix errors and improve the Product
• Comply with law, enforce our terms and protect the rights and safety of users and the public

We do not use personal information for targeted advertising, and we do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

4. Artificial intelligence features

When you use AI features, the content you submit is sent to the AI model provider listed under “How we share information” to generate a response. The study assistant uses Google's Gemini API. Today we use Google's unpaid Gemini API tier. Under Google's terms for unpaid services, Google may use the prompts you send and the responses it generates to provide, improve and develop its products and machine-learning technologies, and human reviewers may read them after Google disconnects them from our account. Do not enter personal, client or health information into the assistant. If we move to Google's paid tier, Google will no longer use this content to improve its products, and we will update this policy. We do not use your prompts to train our own models. If you use the microphone button, your browser's built-in speech recognition turns your speech into text before anything is sent; depending on your browser, the audio may be processed by the browser maker (for example Google in Chrome), and we do not receive or store the audio. AI output can be wrong; see the AI Transparency & Use Policy.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only:

• With service providers that process it on our behalf under contracts that limit its use (listed below)
• When required by law, subpoena or court order, or to protect rights, safety and security; we review each request and notify the affected user when the law allows
• In a merger, acquisition or sale of assets, subject to this policy
• With your consent or at your direction

Service providers used by this Product:

An up-to-date list is kept at https://orvexiatech.com/subprocessors.html. We will update this list before adding a provider that receives personal information.

6. Cookies, local storage and Do Not Track

We use only the cookies and local storage needed to run the Product, remember your preferences and keep it secure; bcbazone.com sets no cookies and uses no analytics or advertising tools. Details are in the Cookie Policy. We honor Global Privacy Control (GPC) signals as an opt-out of any sale or sharing. Browsers send "Do Not Track" signals inconsistently; because we do not track you across third-party sites, we treat them the same as GPC.

7. Business customers

This Product is offered directly to individuals. If that changes, this section will explain how we process data for business customers.

8. How long we keep information

We keep personal information only as long as needed for the purposes above: account data while your account is active; billing records for as long as tax and accounting laws require (generally up to seven years); support messages for up to two years; security logs for up to one year. When you delete your account, we delete or de-identify your personal information within 30 days, except what the law requires us to keep. See the Data Retention & Deletion Policy.

9. How we protect information

We use administrative, technical and physical safeguards appropriate to the sensitivity of the data, including encryption in transit (TLS), encryption at rest provided by our database host, row-level access controls so that one user cannot read another's data, optional two-factor authentication for your account, and limited administrative access. No method of transmission or storage is completely secure; if a breach affects your personal information, we will notify you without unreasonable delay and as required by law (in Texas, no later than 60 days after we determine a breach occurred), and we will notify the Texas Attorney General within 30 days, through its online form, when 250 or more Texas residents are affected, and the consumer reporting agencies when the law requires it (for example when we must notify more than 10,000 people at once).

10. Your rights and choices

Wherever you live, you can ask us to:

• Confirm whether we process your personal information and give you a copy in a portable format
• Correct inaccurate information
• Delete your personal information
• Opt out of any sale, sharing for targeted advertising or profiling (we do not do these, but you may still submit the request)
• Withdraw consent you gave (for example to marketing emails)
• Limit the use of sensitive personal information

How to submit a request: use the privacy request form at https://orvexiatech.com/privacy-request, email admin@orvexiatech.com, or use the account settings in the Product where available. We will confirm receipt within 10 business days and answer within 45 days (we may extend once by another 45 days and will tell you why). We verify requests by matching information we already hold; you may use an authorized agent with your signed permission. You can make these requests free of charge up to twice a year. We will not discriminate against you for exercising your rights.

Appeals: if we decline your request, you can appeal by replying to our decision or writing to admin@orvexiatech.com with the subject "Privacy appeal". We will answer within 45 days and explain our decision. If we deny your appeal, you may file a complaint with the Texas Attorney General at https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint (or with the Attorney General of your state).

11. State-specific notices

Texas. Under the Texas Data Privacy and Security Act, Texas residents have the rights described under “Your rights and choices”. We do not sell personal data, including sensitive personal data, and we do not process personal data for targeted advertising.

California. In the last 12 months we collected the categories listed under “Information we collect” (identifiers; commercial information where you made purchases; internet or other electronic network activity; and inferences only about your use of the Product; we do not collect precise geolocation, and voice input is converted to text by your browser) from the sources and for the purposes described above. We have not sold or shared personal information, and we do not have actual knowledge of selling or sharing the data of consumers under 16. California residents have the right to know, delete, correct, opt out of sale/sharing and limit the use of sensitive personal information. Under California's "Shine the Light" law, we do not disclose personal information to third parties for their own direct marketing.

Other states. Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, Virginia and other states with comprehensive privacy laws have the rights described under “Your rights and choices”, which we honor for everyone.

12. Users in the European Economic Area, United Kingdom and Switzerland

If the GDPR or UK GDPR applies, our legal bases are: performance of a contract (to provide the Product), legitimate interests (security, fraud prevention, improving the Product), consent (marketing emails), and legal obligation. You also have the rights to object, to restrict processing and to lodge a complaint with your local data protection authority. Personal information is processed in the United States; where required, we rely on the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework of our providers. The AI study assistant is not offered to users in the European Economic Area, Switzerland or the United Kingdom while we use Google's unpaid tier.

13. Children

You must be at least 18 years old to use the Product. Google's terms do not allow the Gemini API to be used in services directed to, or likely to be used by, people under 18. The Product is not directed to children, and we do not knowingly collect personal information from children under 13; if we learn we did, we delete it. If you believe a minor gave us personal information, contact admin@orvexiatech.com and we will delete it.

14. Changes to this policy

We will post any change on this page with a new "Last updated" date. If a change is material, we will notify you in the Product or by email before it takes effect, and where the law requires it we will ask for your consent.

15. Contact

ORVEXIA Technologies LLC

Mailing address: 12100 S Highway 6, Apt 4205, Sugar Land, TX 77498, United States

Email: admin@orvexiatech.com

Website: https://orvexiatech.com