Legal

Policies and legal information

Privacy Policy

Last updated: January 1, 2026

OrthoVellum ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Service").

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide, including:

  • Account Information: Name, email address, password, and profile details
  • Professional Information: Medical specialty, training level, institution (optional)
  • Payment Information: Billing address and payment method (processed securely via Stripe)
  • User Content: Forum posts, study notes, flashcards, and feedback
  • Communications: Emails, support requests, and survey responses

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

  • Usage Data: Pages visited, features used, study progress, and exam scores
  • Device Information: Device type, operating system, browser type, and screen resolution
  • Log Data: IP address, access times, referring URLs, and error logs
  • Cookies and Tracking: See our Cookie Policy

1.3 Information from Third Parties

We may receive information from:

  • Authentication Providers: If you sign in with Google or other providers via Clerk
  • Analytics Services: Aggregated usage statistics

2. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve the Service
  • Create and manage your account
  • Process transactions and send billing information
  • Personalize your learning experience and recommendations
  • Track your study progress and generate analytics
  • Send important updates, notifications, and promotional materials
  • Respond to your inquiries and provide support
  • Detect, prevent, and address technical issues and fraud
  • Conduct research and analysis to improve our content
  • Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share information with:

3.1 Service Providers

Third-party vendors who help us operate the Service:

  • Clerk: Authentication and user management
  • Convex: Database and real-time data services
  • Stripe: Payment processing
  • Vercel: Website hosting
  • Google Analytics: Usage analytics
  • Google AdSense: Advertising (see Cookie Policy)

3.2 Community Features

Information you share in forums, study groups, or public profiles may be visible to other users. Be mindful of what you share publicly.

3.3 Aggregated Data

We may share anonymized, aggregated data (e.g., average exam scores, popular topics) for research or statistical purposes. This data cannot identify you personally.

3.4 Legal Requirements

We may disclose information if required by law or to:

  • Comply with legal process or government requests
  • Enforce our Terms of Service
  • Protect our rights, privacy, safety, or property
  • Respond to an emergency involving personal safety

3.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing
  • Regular security audits and updates
  • Access controls and authentication
  • Secure cloud infrastructure

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your information for as long as:

  • Your account is active
  • Needed to provide you with the Service
  • Required by law or for legitimate business purposes

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

6. Your Rights and Choices

6.1 Access and Portability

You can access and download your personal data through your account settings or by contacting us.

6.2 Correction

You can update your account information at any time through your profile settings.

6.3 Deletion

You can request deletion of your account and personal data by contacting us at privacy@orthovellum.com.

6.4 Marketing Communications

You can opt out of promotional emails by clicking "unsubscribe" in any email or updating your notification preferences.

6.5 Cookies

You can manage cookie preferences through your browser settings. See our Cookie Policy for details.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including Australia, the United States, and the European Union. We ensure appropriate safeguards are in place for international transfers.

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it promptly.

9. GDPR Rights (European Users)

If you are in the European Economic Area, you have additional rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restriction: Request limitation of processing
  • Right to Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@orthovellum.com.

10. Australian Privacy Principles

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988. Australian residents can contact the Office of the Australian Information Commissioner (OAIC) for complaints about privacy handling.

11. California Privacy Rights (CCPA)

California residents have the right to:

  • Know what personal information is collected
  • Know whether personal information is sold or disclosed
  • Say no to the sale of personal information (we do not sell data)
  • Access your personal information
  • Request deletion of your personal information
  • Not be discriminated against for exercising these rights

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at: