Payroll bureaus and accounting firms that run payroll for multiple client companies, and employers who want a clear approval path from time entry through to posted pay runs and employee paystubs.

Is Orvipa a full replacement for my payroll engine?

Orvipa is built as a payroll operations workspace: timesheets, batch review, employer sign-off, registers, and exports. It is designed to fit alongside your compliance and year-end processes (for example T4s and remittances) rather than replace every back-office system on day one.

Does it support Canadian payroll?

Yes. The product is Canadian payroll aware—pay lines, statutory deductions, registers, and exports are oriented toward how Canadian accountants close the month and support client reporting.

How do we get started?

Use the contact form or email us to discuss your firm, client count, and rollout. We will set up access to the app at your organization and walk you through onboarding—typically starting with bureau administrators, then employers and employees as you expand.

How is pricing determined?

We price based on your number of client companies, employee scale, and whether you need enterprise options such as dedicated support or custom integrations. Use the contact form and we will reply with a tailored quote.

Where is my data hosted?

For self-hosted or private deployments, you control the environment. For cloud offerings, hosting and data residency are agreed during onboarding—ask us for the current options.

Last updated: April 9, 2026

Privacy policy

Introduction

Orvipa (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal information we collect when you use our public marketing website (the “Site”), why we collect it, how we use and share it, how long we keep it, and the choices and rights you may have. By using the Site, you acknowledge that you have read this policy.

This policy applies only to information collected through the Site (including embedded forms and email-initiated contact). It does not govern the Orvipa payroll application, APIs, or other services offered under a separate agreement—those relationships are described in your order form, master services agreement, data processing addendum, and related product documentation. For a high-level overview of product processing, see our Data processing summary.

Definitions

Personal information means information about an identifiable individual. It includes information that identifies you directly (for example your name or email) or indirectly when combined with other data (for example an IP address or device identifier, depending on context and applicable law).
Processing means any operation performed on personal information, including collection, storage, use, disclosure, and deletion.
Subprocessors are third-party service providers we engage to process personal information on our behalf (for example hosting or analytics). See our Subprocessors page for the marketing-site list.

Data controller

For personal information processed in connection with this Site, Orvipa acts as the organization responsible for decisions about how that information is used (often called the “controller” or “organization” under Canadian privacy law, and the “business” under some U.S. state laws).

Contact for privacy inquiries: hello@orvipa.com. For rights requests, include “Privacy request” in the subject line and describe your request with enough detail for us to verify and respond.

Categories of personal information we collect

The categories below reflect what we may collect through the Site. Not every visitor provides every category.

Identity and contact data — name, email address, company name, job title, phone number, and similar identifiers you provide when you use the contact form, subscribe to updates (if offered), or email us directly.
Communications content — the body of your message, attachments you choose to send, and metadata associated with email (such as date and time).
Technical and device data — IP address, browser type and version, operating system, device type, screen resolution, language preferences, and general geographic region inferred from IP (typically at city or regional level, not precise GPS from the Site alone).
Usage and interaction data — pages and screens viewed, time on page, referring URL, exit pages, click paths, and similar metrics when you have accepted analytics (see Cookie policy).
Preference data — your cookie and analytics consent choice stored locally in your browser so we can remember your choices when you return to this Site.

Sources of personal information

We collect personal information from:

You — when you submit forms, send email, or otherwise communicate with us.
Your browser and device — automatically when you load pages, subject to your cookie settings and consent choices.
Analytics and similar tools — when you opt in to analytics, our vendors may process technical and usage data as described in their documentation and our Cookie policy.

Purposes of processing

We use personal information for the following purposes:

Responding to inquiries — to read, route, and answer sales, support, partnership, and general questions you send us.
Operating the Site — to deliver pages, fonts, and assets; to maintain performance and compatibility; to diagnose errors; and to protect against fraud, abuse, and security threats.
Analytics and improvement — when you consent, to measure traffic, understand how visitors use the Site, test layout changes, and improve content and conversion paths.
Compliance and legal claims — to comply with applicable law, respond to lawful requests from public authorities (after review), enforce our Terms of use and Acceptable use policy, and establish, exercise, or defend legal claims.
Business operations — for internal reporting, finance, and continuity planning, using aggregated or de-identified data where possible.

Legal bases (where applicable)

Depending on your location, we rely on one or more of the following grounds: consent (for optional cookies and analytics, and for certain marketing communications if we send them); legitimate interests in operating a secure, reliable website and responding to inquiries, balanced against your rights; performance of a contract or steps at your request before a contract (for example preparing a quote); and legal obligation where retention or disclosure is required by law.

We may disclose personal information to:

Service providers (subprocessors) who host the Site, provide analytics (when enabled), deliver email, monitor uptime, or support security operations. They may only use personal information to provide services to us and in line with our instructions, subject to contract.
Professional advisers such as lawyers and accountants where necessary for legal or audit purposes.
Authorities when we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Orvipa, our users, or the public.
Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality and continued protection of personal information as required by law.

We do not sell your personal information as that term is commonly defined in Canadian or U.S. comprehensive privacy laws, and we do not share it for cross-context behavioral advertising through the marketing Site without appropriate consent where required.

Cross-border processing

We and our subprocessors may process and store personal information in Canada, the United States, the European Economic Area, the United Kingdom, and other countries where our vendors operate data centers or support staff. When personal information is transferred from the EEA, UK, or Switzerland to countries that have not been deemed to provide an adequate level of protection, we implement appropriate safeguards such as standard contractual clauses or other mechanisms recognized under applicable law, as described in our agreements with customers where relevant.

Retention

We retain personal information only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law. Typical retention guidelines:

Contact and inquiry records — for the duration needed to complete the conversation, manage the commercial relationship, and meet ordinary business, tax, and litigation-hold requirements (often several years for B2B correspondence, depending on context).
Technical logs — for a limited period required for security, debugging, and abuse prevention, after which they may be aggregated or deleted according to hosting and security tooling configuration.
Analytics data — governed by the retention and configuration settings of whichever analytics or measurement tools we use for this Site (only after you opt in where consent is required).

When retention periods end, we delete, anonymize, or aggregate personal information where feasible.

Security

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the information we process on the Site. These may include HTTPS encryption in transit, access controls for systems that store inquiries, vendor security reviews for subprocessors, and employee training on data handling. No method of transmission over the Internet is completely secure; see also our Security page for vulnerability reporting.

Your rights and choices

Subject to applicable law, you may have the right to request access to, correction of, or deletion of your personal information; to restrict or object to certain processing; to withdraw consent where processing was based on consent (without affecting the lawfulness of processing before withdrawal); and to receive a copy of your personal information in a portable format where technically feasible.

Canada (PIPEDA and provincial laws). Individuals in Canada may have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) or substantially similar provincial statutes (for example Alberta PIPA, BC PIPA, and Quebec Law 25). You may file a complaint with the Office of the Privacy Commissioner of Canada or your provincial commissioner, as applicable.

European Economic Area, UK, and Switzerland. If you are in the EEA, UK, or Switzerland, you may lodge a complaint with your local supervisory authority. You also have the right to object to processing based on legitimate interests and, in some cases, to request restriction of processing.

United States (state laws). Residents of certain U.S. states may have additional rights (including opt-out of “sale” or “sharing” for targeted advertising where those concepts apply). Because this Site is primarily B2B and limits tracking per our Cookie policy, many of these rights may be exercised by managing cookies or contacting us.

To submit a request, email hello@orvipa.com. We may need to verify your identity before fulfilling certain requests. We will respond within the timeframe required by applicable law or, where no specific deadline applies, within a reasonable period.

Automated decision-making

We do not use the personal information collected through this Site to make solely automated decisions that produce legal or similarly significant effects on individuals.

Children

The Site is directed at businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

Third-party links and integrations

The Site may link to third-party websites, social networks, or partner pages. Their privacy practices govern any information you provide there. We encourage you to read their policies before submitting personal information.

Changes to this policy

We may update this Privacy Policy to reflect changes in law, our practices, or the features of the Site. We will revise the “Last updated” date at the top of this page when we publish changes. Where required by law, we will provide additional notice (for example a banner or email). Continued use of the Site after the effective date constitutes acceptance of the updated policy, to the extent permitted by law.

Contact

For questions or requests regarding this Privacy Policy: hello@orvipa.com.