Effective date: August 14, 2026 Applies to: Orion Nova at orion-nova.io (the "Service") Provider: Orion Network LLC ("Orion", "we", "us", "our")
1. About this policy, and who is responsible for what
Nova is a business-to-business platform. Orion provides it to Customer organizations, and those organizations decide who uses it and what data goes into it.
Two roles, kept separate:
- Orion as processor. For the land, ownership, leasing, financial, personnel, and project data inside a Customer's workspace ("Customer Data"), the Customer is the controller and decides why and how that data is processed. Orion processes it on the Customer's documented instructions, under the Terms of Service and any data processing agreement. If your information is in a Customer's workspace and you want to access, correct, or delete it, contact that organization — we will direct your request there, and support them in responding.
- Orion as controller. For account and authentication data about the people who sign in, and for technical logs generated by operating the Service, Orion determines the purposes itself, as described below.
This policy also covers information collected through Orion's public website and demo-inquiry form.
2. Information in the Service
Account and profile data. Your name, email address, organization, assigned role, granted capabilities, and the clients and projects your account may access. We store account status and activity timestamps such as last sign-in.
Authentication data. Email and a password stored as a one-way hash — we do not store passwords in readable form. Session tokens, and time-limited invitation and password-reset tokens, which are themselves stored only as hashes.
Personnel data, where a Customer uses those features. Nova supports personnel and payroll-adjacent recordkeeping on behalf of a Customer, which may include date of birth, home address, partial government identification numbers, and bank routing information for reimbursement. This data is Customer Data. Orion holds it as processor, restricts it to roles the Customer designates, and does not use it for any purpose other than operating the Service.
Land and project data. Tract, ownership, leasing, mapping, brokerage, financial, crew, timesheet, and project-progress records, including interested-party records that can contain individuals' names, mailing addresses, and contact details. See Section 5.
Communications and files. Messages sent within the Service and files uploaded to it, including attachments and documents.
Usage and log data. Our hosting and infrastructure providers automatically record standard technical information such as IP address, browser and device type, and request logs, for security, diagnostics, and abuse prevention.
AI feature data. Where a Customer enables AI-assisted features, the prompts submitted and the relevant portions of workspace data used to answer them are transmitted to the model provider in the Subprocessor List, and are logged by Orion for security, billing, and quality purposes.
Cookies. Essential cookies only. See the Cookie & Tracking Notice.
3. Information from the public website
If you submit a demo request or contact form on Orion's public site, we collect your name, work email, organization, any phone number and message you provide, and standard request metadata. We use it to respond to your inquiry and to maintain a record of it. You do not need an account to browse the public site.
4. How we use information
As controller, we use account, authentication, usage, and inquiry data to:
- provide, secure, and operate the Service and authenticate access;
- enforce organization, role, scope, and capability permissions so users see only what they are authorized to see;
- send account and service communications, such as invitations, password resets, and notices of material change;
- monitor for and investigate security incidents, abuse, and cost anomalies, and debug problems;
- meter and bill usage;
- respond to inquiries and support requests; and
- comply with law and enforce the Terms of Service.
As processor, we handle Customer Data only to provide the Service to the Customer and on the Customer's instructions.
We do not sell personal information. We do not use Service data for advertising. We do not use Customer Data to train machine learning models, and we require our subprocessors not to.
5. Owners, interested parties, and other non-users
Delivering land services means the Service holds records about people who never log in — property owners, heirs, lessors, and other interested parties — including names, mailing addresses, and interest details.
Orion holds this data as processor, on behalf of the Customer, which obtains it from its own records, from its clients, and from public sources such as courthouse and regulatory filings. It is used to build ownership schedules, run acquisition and title workflows, and produce project deliverables for that Customer. It is not used for marketing, and Orion does not disclose it to other Customers.
If you are an individual whose information appears in these records, contact us at hunterbsell@orn-net.com and we will identify the responsible Customer and route your request to them, or contact that organization directly if you know who it is.
6. How information is shared
We share information only as needed to run the Service:
- Subprocessors. Vetted providers that host and operate the Service, listed in the Subprocessor List. They process data on our instructions under written terms.
- Within the Customer organization. Account and project data is visible to authorized personnel of the Customer, according to the roles and scopes that organization configures, and to client-portal users the Customer grants access.
- Orion platform personnel. A small number of Orion staff hold cross-tenant administrative access for support, incident response, and operations. Access is limited to what the task requires.
- Legal and safety. Where required by law or legal process, or to protect the rights, security, or property of Orion, our Customers, or others. Where legally permitted, we will notify the affected Customer before disclosing Customer Data.
- Business transfers. If Orion is involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction, subject to this policy.
7. Security
We protect information with organization-, role-, and scope-based access controls enforced in the application layer, encrypted connections (HTTPS/TLS), encryption at rest through our infrastructure providers, private storage buckets with time-limited signed access links, invitation-only account creation, hashed passwords, hashed and expiring invitation and reset tokens, and session limits.
No system is perfectly secure, but we work to protect information appropriately for its sensitivity. If you believe your account has been compromised, contact us immediately at hunterbsell@orn-net.com.
Security incidents. If a breach affecting personal information occurs, Orion will notify the affected Customer without undue delay, and will notify affected individuals where we are the controller, in the manner and within the timeframes required by applicable law, including the Louisiana Database Security Breach Notification Law.
8. Retention
We retain account data while your account is active and for a reasonable period afterward for security and record-keeping. Customer Data is retained according to the Customer's instructions and its Subscription Agreement; absent other instruction, it is available for export for thirty (30) days after termination and may then be deleted. Technical logs are retained on a short rolling window sufficient for security and diagnostics. Financial and billing records are retained as required by tax and business record-keeping law.
9. Your choices and rights
- Access and correction. Ask your organization's administrator to review or correct your account information, or contact us at hunterbsell@orn-net.com.
- Account closure. Ask your organization's administrator to deactivate your account when you no longer need access.
- Jurisdiction-specific rights. Depending on where you live, you may have additional rights regarding your personal information, which may include rights to access, correct, delete, obtain a copy of, or limit certain uses of it, and to appeal a refused request. Contact us at hunterbsell@orn-net.com and we will respond as required by applicable law. Where the request concerns Customer Data, we will route it to the responsible Customer.
10. Children
The Service is a business tool intended for authorized adult users. It is not directed to children and does not knowingly collect personal information from children.
11. Where data is processed
The Service and its providers process and store data in the United States, in the region identified in the Subprocessor List. If you access the Service from outside the United States, you understand your information will be processed in the United States. Where a Customer requires a different processing region or additional transfer safeguards, those are addressed in its Subscription Agreement.
12. Changes to this policy
We may update this policy from time to time. We will indicate changes by updating the effective date and, where appropriate, by notice within the Service or to Customer administrators. Material changes affecting Customer Data will be notified in accordance with the applicable data processing agreement.
13. Contact
Privacy questions or requests: hunterbsell@orn-net.com | Orion Network LLC, 214 Flora Springs Dr, Youngsville, LA 70592.