Legal Framework

Policies for using the OrthoVellum library.

Legal, privacy, copyright, refund, cookie, and medical-disclaimer pages are part of the site architecture: they define how the educational library can be used, shared, and interpreted.

Privacy Policy

Last updated: June 11, 2026

OrthoVellum ("we," "us," or "our") takes your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, any apps we offer, and related services (together, the "Service").

1. Information We Collect

1.1 Information You Provide

We collect information you give us, including:

  • Account information: name, email address, password, and profile details
  • Professional information: medical specialty, training level, and institution (optional)
  • Payment information: billing address and payment method (handled by our payment processor, Stripe)
  • Content you submit: study notes, support requests, and feedback
  • Messages: emails, support requests, and survey responses

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

  • Usage data: pages you visit, features you use, study progress, and exam scores
  • Device information: device type, operating system, browser, and screen resolution
  • Log data: IP address, access times, referring URLs, and error logs
  • Cookies and tracking: see our Cookie Policy

1.3 Information from Third Parties

We may also receive information from:

  • Sign-in providers: if you sign in with Google or another provider through Clerk
  • Analytics services: combined usage statistics

2. How We Use Your Information

We use this information to:

  • Run, maintain, and improve the Service
  • Create and manage your account
  • Process payments and send billing information
  • Tailor your learning experience and recommendations
  • Track your study progress and produce analytics
  • Send important updates, notifications, and promotional messages
  • Answer your questions and provide support
  • Spot and prevent technical problems and fraud
  • Research and analyse how to improve our content
  • Meet our legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share it with:

3.1 Service Providers

Companies that help us run the Service:

  • Clerk: Authentication, account management, and Google sign-in
  • Stripe: Payment processing for active subscription products
  • Vercel: Website hosting
  • Google Analytics: Usage analytics where enabled

3.2 Aggregated Data

We may share anonymised, combined data (for example, average exam scores or popular topics) for research or statistics. This data cannot identify you.

3.3 Legal Requirements

We may share information where the law requires it, or to:

  • Comply with a legal process or government request
  • Enforce our Terms of Service
  • Protect our rights, privacy, safety, or property
  • Respond to an emergency that affects someone's safety

3.4 Business Transfers

If OrthoVellum is involved in a merger, acquisition, or sale of assets, your information may pass to the new owner.

4. Data Security

We use reasonable security measures suited to a small service, including HTTPS/TLS to protect data in transit. Logins are handled by our sign-in provider, Clerk. No method of sending or storing data is ever completely secure.

5. Data Retention

We keep your information for as long as:

  • Your account is active
  • We need it to provide the Service
  • The law or a legitimate business need requires it

When you delete your account, we will delete or anonymise your personal information within a reasonable time, unless the law or our service providers' own retention policies require us to keep it.

6. Your Rights and Choices

6.1 Access and Portability

You can view and download your personal data in your account settings, or by contacting us.

6.2 Correction

You can update your account information any time in your profile settings.

6.3 Deletion

You can ask us to delete your account and personal data by .

6.4 Marketing Communications

You can stop promotional emails by clicking "unsubscribe" in any email or by changing your notification preferences.

6.5 Cookies

You can manage cookies in your browser settings. See our Cookie Policy for details.

7. International Data Transfers

Your information may be sent to and processed in countries other than your own, including Australia, the United States, and the European Union. We put appropriate safeguards in place for these transfers.

8. Children's Privacy

The Service is not meant for anyone under 18. We do not knowingly collect information from children. If we find out we have, we will delete it promptly.

9. GDPR Rights (European Users)

Depending on where you live, you may have the right to access, correct, delete, or move your data, or to object to how we process it. To use any of these rights, and we will respond as the law requires.

10. Australian Privacy Principles

We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988. If you live in Australia and have a complaint about how we handle your privacy, you can contact the Office of the Australian Information Commissioner (OAIC).

11. California Privacy Rights (CCPA)

Depending on where you live, you may have the right to access, correct, delete, or move your data, or to object to how we process it. We do not sell your personal information. To use any of these rights, and we will respond as the law requires.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a significant change, we will post the updated policy on the Service and update the "Last updated" date. If you keep using the Service after that, you accept the change.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at: