1. Who is responsible
Orven Labs operates Climer and is the controller for personal data about Climer account holders, website visitors, prospects, and customer contacts.
Orven Labs is registered in Hilversum, the Netherlands, under Dutch Chamber of Commerce number 98850083. You can contact us at hello@climer.io.
Where a customer submits personal data about other people through Climer, that customer is normally the controller and Orven Labs processes the data on the customer's instructions to provide the service.
2. Data we process
Depending on how you use Climer, we process:
- account data, including your email address, authentication identifiers, account and site membership, and session information;
- site and onboarding data, including website URLs, product and audience descriptions, positioning, competitors, market, brand guidance, schedules, preferences, and feedback;
- Google Search Console data that you authorize us to read, including property identifiers, queries, pages, clicks, impressions, click-through rate, average position, and daily performance;
- content and service data, including prompts, plans, evidence, drafts, revisions, reviews, publication records, images, and measured outcomes;
- billing data, including Stripe customer and subscription identifiers, plan, status, billing period, and payment events. We do not receive complete payment-card details;
- communications, including contact-form messages, support requests, and transactional email details; and
- technical and security data, such as request timestamps, IP address, browser or device information, error details, and service logs generated by our infrastructure providers.
Please do not submit special-category or other sensitive personal data unless it is necessary and you are legally permitted to do so.
3. Why we process data
We process personal data for the following purposes and bases:
- Providing Climer. We create and secure accounts, run onboarding, collect authorized evidence, prepare and review content, support publication, measure outcomes, and provide support as necessary to perform our contract with you.
- Connected services. We process Google Search Console data after you choose to connect it and grant permission.
- Billing and administration. We manage subscriptions, refunds, records, and required tax or accounting obligations to perform our contract and comply with law.
- Security and reliability. We prevent abuse, investigate errors, protect accounts, and improve service reliability based on our legitimate interests in operating a safe and effective product.
- Communications. We respond to requests and send service messages necessary for the contract. We will ask for consent where the law requires it for marketing.
4. Google Search Console data
Climer requests only the read-only Google Search Console scope. We use the resulting data to show search performance, identify opportunities, support content planning and recommendations, and measure published content outcomes. Climer cannot change data in Search Console.
We store the selected property, Search Console evidence and derived measurements, and an encrypted refresh token. Access tokens are used transiently to make authorized requests. We do not sell Google user data or use it for advertising, credit decisions, or unrelated profiling.
We share Google user data only with processors needed to provide the visible Climer features described here, including infrastructure and, where relevant to recommendations or content work, AI processing providers described below. Climer's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
You can revoke Climer's access in your Google Account settings and ask us at hello@climer.io to disconnect the property and delete the stored credential and related data, subject to legal retention obligations.
5. AI processing and OpenRouter
Climer uses OpenRouter to access AI models for onboarding, public-web research, AI-answer sampling, content planning, writing, independent review, and image generation. Inputs can include your instructions, public website content, drafts, brand assets, and selected Search Console evidence needed for the requested feature.
OpenRouter routes requests to selected model providers. Depending on Climer's configuration and service availability, these may include OpenAI, Anthropic, Google, Perplexity, and other providers available through OpenRouter. The provider that answers a request receives the relevant input and generates an output.
Orven Labs does not train its own general-purpose or foundation model on customer data. OpenRouter states that its own prompt and response logging is off by default unless enabled, but downstream provider practices vary. We do not promise that every routed endpoint has zero data retention. A selected provider may retain inputs or outputs or use them to improve its services under its applicable terms and data controls. See the OpenRouter privacy policy and data-collection documentation.
AI output can be inaccurate or incomplete. Climer stores relevant outputs, evidence, and review results so you can inspect and decide what to publish.
6. Service providers and recipients
We use service providers including:
- Vercel for the web application and delivery;
- Railway for background processing;
- Supabase for authentication, database, and file storage;
- Stripe and Link for checkout, subscriptions, payment processing, invoicing, refunds, tax handling, and transaction support;
- Sender for contact and transactional email;
- OpenRouter and routed model providers for the AI processing described above;
- Google for authentication and Search Console access; and
- DataForSEO for keyword and search-market evidence.
We may also disclose data where required by law, to protect rights or service security, or in connection with a business reorganization or sale. We do not sell personal data.
7. International transfers
Some providers or model endpoints process data outside the European Economic Area. Where data-protection law requires it, we use an applicable transfer mechanism, such as an adequacy decision or standard contractual clauses, and supplementary safeguards where appropriate.
8. How long we keep data
We keep account and service data while your account is active and for a reasonable period afterward where needed to provide exports, resolve disputes, secure the service, or establish legal claims. We delete or anonymize data when it is no longer needed for these purposes.
OAuth state cookies expire after ten minutes. Google access tokens are used transiently; the encrypted refresh token remains until the connection is removed or the related account data is deleted. Contact messages are kept only as long as needed to answer and maintain normal business records. Billing and tax records may be retained for seven years, or longer where Dutch or EU tax rules require it.
Backups and provider logs may persist for a limited additional period before they are overwritten or deleted.
10. Your privacy rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing. You may also object to direct marketing at any time.
Send requests to hello@climer.io. We may need to verify your identity and authority before acting. You may lodge a complaint with the Dutch Data Protection Authority or your local supervisory authority.
11. Security
We use organizational and technical measures intended to protect data, including access controls, encrypted transport, server-only provider credentials, and encryption of Google refresh tokens at rest. No internet service is completely secure, so we cannot guarantee absolute security.
12. Children, changes, and contact
Climer is a business service and is not directed to children under 18. If you believe a child has provided personal data, contact us so we can investigate and delete it where appropriate.
We may update this policy when the service or legal requirements change. We will publish the new date here and provide additional notice where a change materially affects your rights.
Questions or requests can be sent to Orven Labs at hello@climer.io.