ORVEXIA Infinity AI — Security & Responsible Disclosure Policy

Document ID: ORX-INFINITY-LEGAL-006-EN · Version: 1.1 · Last updated: October 20, 2026 · Effective date: set on publication

Operator: ORVEXIA Technologies LLC, Sugar Land, Texas · Product: ORVEXIA Infinity AI (https://orvexiatech.com/infinity) · Product status: In development — not yet generally available

Product status: In development — not yet generally available. This document describes how the product is designed to work and the commitments ORVEXIA makes for it. It will be updated before launch if the final product differs.

1. Our commitments

Encryption in transit (TLS 1.2+) for all network traffic
Encryption at rest for stored data; on-device data encrypted where the Product says so (for example AES-256-GCM)
Least-privilege access, multi-factor authentication and audit logs for administrative access [CONFIRM before launch]
Row-level access controls so one customer cannot read another's data
No secrets in client code; API keys kept on the server side
Dependency updates and security review before each release
Encrypted backups and a documented incident-response plan

We describe only security features that exist. We do not claim certifications (such as SOC 2, ISO 27001, HIPAA or PCI) that ORVEXIA has not obtained.

2. Reporting a vulnerability

Email security@orvexiatech.com with a description, steps to reproduce, affected version or URL and your contact details. We acknowledge reports within 3 business days, keep you informed, and aim to fix critical issues within 30 days. Our security.txt is at https://orvexiatech.com/.well-known/security.txt.

3. Safe harbor

We will not pursue legal action against good-faith research that follows this policy: test only your own accounts, do not access, change or delete other people's data, do not degrade the service (no denial-of-service, spam or social engineering), give us reasonable time to fix before disclosure, and do not demand payment. We do not currently run a paid bug bounty.

4. Incidents

If an incident affects your personal information, we will notify you without unreasonable delay and within the time limits set by law (in Texas, no later than 60 days), and notify the Texas Attorney General within 30 days, through its online form, when 250 or more Texans are affected.

5. Your part

Use a strong, unique password, turn on two-factor authentication, keep your device and app updated, and never share codes we send you. ORVEXIA staff will never ask for your password or one-time codes.

6. Contact

ORVEXIA Technologies LLC

Mailing address: 12100 S Highway 6, Apt 4205, Sugar Land, TX 77498, United States

Email: legal@orvexiatech.com

Website: https://orvexiatech.com

Related documents for this product: Privacy Policy; Terms of Service; Cookie & Tracking Technologies Policy.