Privacy Policy

Orvia · Last updated: 19 October 2026

Orvia is a social media manager for Windows, sold by XniperBuilds. It runs on your own PC and posts to your accounts through each platform's official connection. This policy covers the Orvia program, Orvia Cloud (our service at cloud.xniperbuilds.com) and the Orvia Telegram bot (@orviaxbot).

Orvia's guide shows how to connect your accounts through a Meta app you make yourself. Such an app is only ever used through Orvia, so this page also describes how data reached through it is handled, and its owner may give this page as the app's privacy policy and its data deletion instructions.

The short version: Your accounts, posts, files, comments, messages and numbers live on your PC. The sign-ins Orvia keeps are encrypted with Windows. There are no ads, no analytics and no trackers in Orvia, and nothing is sold or shared. Orvia Cloud receives something only when you use a feature that needs it — a picture or video Instagram must fetch from a web link, posting while your PC is off, or Telegram — and it keeps it briefly, as listed below. You can delete all of it yourself.

What we know about you as a buyer

When you buy Orvia, we keep the name and WhatsApp number you bought with, to issue your licence key and to remind you about renewing it. Your licence key carries that name and number inside it, so the name shows in Orvia as "Licensed to …". Orvia sends the key with each request to Orvia Cloud so the cloud can tell whether your licence includes Cloud; it is used for nothing else. We do not ask for your email, address or payment details inside Orvia.

Data stored on your PC

To work at all, Orvia keeps these on your own computer, in its data folder (%APPDATA%\Orvia) and in the content folder you choose:

Your settings, niches, posting times, templates and rules.
Your posts — drafts, schedules, captions, and what happened when each one went out.
Your library — the pictures and videos you add or drop into a niche's folder. They stay where they are; Orvia reads them, makes small previews, and never uploads them anywhere except to the platform you post them to (and, for some posts, Orvia Cloud — see below).
Channel sign-ins — the access tokens, App IDs and App secrets for the accounts you connect, encrypted with Windows DPAPI, so a copied file is useless on another machine.
Account windows — when you open an account in Orvia's own browser window, that window keeps its web login for that one account, separate from every other account and from your own browser.
What the platforms send back — your accounts' profile details, post numbers (reach, views, likes), and the comments and messages shown in Orvia's Inbox.
Backups you make, saved to the folder you pick.
AI on this PC, only if you switch it on — the models you download, and the captions, replies and transcripts they write. These run on your PC and what you give them never leaves it.

The platforms you connect

Orvia posts to Facebook, Instagram, Threads and LinkedIn through their official APIs, with the access you grant when you connect. It uses that access to:

read your account's basic details, so you can see which account is which;
publish the posts, stories and replies you schedule or approve;
read your posts' numbers and your public competitors' numbers, for Analytics;
read and answer the comments and messages on your accounts, in the Inbox.

Data received from these platforms is used only to show it to you and to do what you ask. It is never sold, never shared with anyone, never used for advertising, and never used to train any AI model. For YouTube, TikTok and Pinterest, Orvia does not connect to your account: it prepares the file and the caption and opens the platform for you to post yourself.

Orvia Cloud — what it receives and how long it keeps it

Orvia Cloud is a small service of ours, run on a cloud hosting provider's network. Your copy of Orvia talks to it only for the features below. Every request carries a random ID for your copy of Orvia and your licence key; as with any request to any website, your network address reaches the server, and it is used only to count how often one place uses the service in a day.

Feature	What Orvia Cloud receives	How long it keeps it
Picture and video links — Instagram connected without a Facebook Page, and Threads, fetch media from a web link	The one file being posted, behind a private link	The link works for 30 minutes; the file is deleted within the hour after
Posting while your PC is off — only if you switch on Settings › Cloud	The sign-ins of your Facebook and Instagram channels (stored encrypted with AES-GCM), and each scheduled post: its caption, time, account and files	Files: deleted once the post is out or no longer needs them. Post records: 90 days after posting (8 days if cancelled). Sign-ins: deleted when you switch Cloud off, remove the channel, or after 60 days without hearing from your PC
Telegram — only if you link it	Your Telegram chat ID and first name; the alerts, approvals and files that pass between Orvia and your own chat	Until you disconnect. Files you send to the bot: until Orvia collects them, at most 7 days. Link codes: work for 30 minutes, deleted within 2 hours
Daily limits	A count of uses per copy of Orvia and per network address	3 days
Updates and keys	Nothing about you — Orvia asks for the latest version and the list of turned-off licence keys	—

When one-click "Sign in" is offered for a platform, the one-time code from that platform passes through Orvia Cloud to be swapped for a sign-in, which goes straight back to your PC; Orvia Cloud does not keep it.

Other connections Orvia makes

AI on this PC — when you choose a model, Orvia downloads the open-source engine from its GitHub release and the model file from a public model library. Each download is checked against a published SHA-256 before it is used. Nothing about you is sent with these downloads.
News feeds you add — Orvia reads the feeds you add to a niche, as a plain request to that feed's address.
AI agents you connect — if you connect an AI agent on your own PC under Settings › AI agents, it talks to Orvia on that PC only. What the agent itself sends elsewhere is governed by that agent's own terms. Posts made by agents wait for your OK unless you turn that off.

What we never do

No advertising, no analytics or telemetry code, no third-party trackers in Orvia.
No selling, renting or sharing of your data with anyone.
No training of AI models on your content, accounts or messages.
No reading of your accounts for anything you did not ask Orvia to do.

Deleting your data

You can delete everything yourself, without asking us:

One account: in Orvia, Settings › Channels, remove the channel. Its sign-in and its account window's web login are deleted from your PC, and its sign-in from Orvia Cloud the next time Orvia talks to it.
Everything in Orvia Cloud: Settings › Cloud, switch Cloud off. Posts not yet started there are cancelled and their files deleted; your saved sign-ins are deleted as soon as nothing is left being posted.
Telegram: Settings › Notifications, press Disconnect — or send /stop to @orviaxbot.
Everything on your PC: uninstall Orvia, then delete the folder %APPDATA%\Orvia. Your own pictures and videos in your content folder stay yours — delete them too if you want.
The access you gave the platforms: on Facebook, Settings & privacy › Settings › Business integrations; on Instagram, Settings › Apps and websites — remove the app. If you made your own Meta app for Orvia, you can also delete that app in Meta for Developers.

Anything left in Orvia Cloud after you stop using Orvia is deleted on its own on the schedule in the table above. To have it deleted sooner, or to have your name and number removed from our sales records, email hello@xniperbuilds.com from any address and tell us the name on your licence; we delete it within 7 days and reply when it is done.

Security

Sign-ins on your PC are encrypted with Windows DPAPI. Sign-ins kept by Orvia Cloud are encrypted with AES-GCM before they are stored, and every connection to Orvia Cloud and to the platforms uses HTTPS. Picture and video links are random and expire after 30 minutes.

Children

Orvia is a tool for people and businesses running social media accounts. It is not directed at children under 13, and we do not knowingly hold data about them.

Changes

If this policy changes, the updated version will be posted at this address with a new date. A change in what Orvia sends anywhere will be described here before the version that makes it is released.

Contact

Questions? Email hello@xniperbuilds.com. The site's general Privacy Policy and Terms of Service are here.

Orvia is an independent program. It is not affiliated with, endorsed by, or connected to Meta, Facebook, Instagram, Threads, LinkedIn, Telegram, YouTube, TikTok or Pinterest; their names are used only to say which services Orvia works with.