1clicklead Privacy Policy

This policy covers 1clicklead (1clicklead.orova.vn), a product of Orova (orova.vn), and supplements Orova's general privacy policy. It covers two groups of people:

• You, the 1clicklead user: Orova is the controller of your account data.
• People whose work contact details appear in search results: the user who runs the search is the controller of their list; Orova processes data on the user's instructions, and is responsible for how the bot finds and reads public pages and for removal requests sent to Orova.

Personal data contact: contact@orova.vn.

• The email you sign in with.
• Your search descriptions, requirements and results.
• The contacts you have blocked (stored as one-way hashes).
• Your top-up and quota usage history and payment transaction references.
• Technical logs needed for operation and security, such as IP address, browser information and sign-in times.

Orova does not receive your card number or banking password; payments are handled by SePay, banks and PayPal.

The bot only takes public contact information that businesses and individuals have posted themselves and that anyone can find on the internet: name, business name, job title, website, email, phone number, social profiles, region and industry, with the source page link. Gender and age are only taken when a public page states them.

The bot does not take: data behind logins, in private groups or messages, behind paywalls or on pages that block bots via robots.txt; sensitive personal data (health, religion, political opinions, sex life, biometrics, ID numbers, bank accounts); photos, post content, or friend or follower lists.

Data is created only when a user runs a search and exists only in that user's account. Orova does not build a shared contact database.

• Account data: to provide the service you signed up for (performance of a contract), for accounting and tax (legal obligation), and for security and fraud prevention (legitimate interests).
• Data about people found: to help users find business partners and customers. For people in the European Union, the basis is legitimate interests under GDPR Article 6(1)(f), balanced by these safeguards: only work details the person published themselves, always with a source link, no sensitive data, and removal and blocking on request.
• In countries whose law requires consent or another basis (such as Vietnam's Law on Personal Data Protection No. 91/2025/QH15), the user must ensure a lawful basis before using the data to make contact.

Orova does not use data about people found for Orova's own purposes or for advertising, and does not sell it.

• AI providers (such as Google for Gemini): receive the description and requirements you enter and public page content, to understand your request and find more leads, under their terms. Your payment details are never sent.
• Payment parties (SePay, banks, PayPal): receive what is needed for top-up transactions.
• Server hosting and sign-in email providers, only as needed to run the service.
• Competent public authorities when the law requires.

Some of these parties process data outside the country where you are, including outside Vietnam. Orova does not sell or rent personal data — Article 7 of Vietnam's Law on Personal Data Protection No. 91/2025/QH15 prohibits buying and selling personal data.

• Searches and lists: until you delete them or delete your account. Searches and leads you delete are removed from your account right away.
• Account data: until you ask us to delete your account.
• Top-up records: for as long as accounting and tax law requires.
• Block lists (yours and system-wide): stored as one-way hashes and kept as long as needed to honor the block.

Copies you have downloaded are outside 1clicklead; you are responsible for deleting them.

The details come from public pages that you or your business published; every row has a source link.

• If a business contacts you, the email or call comes from that business, not from Orova. You can ask them where they got your details and ask them to correct or delete them or stop contacting you; they must handle your request as the law requires and have a "Delete and block" button in 1clicklead.
• You can also send a request to contact@orova.vn with the email, phone number or domain to remove. We respond within 5 business days, delete those details from every existing list in 1clicklead, including other users' lists, and add them to a system-wide block list (as one-way hashes) so they do not appear again for any user.
• Website owners can block OrovaBot via robots.txt.

Orova cannot recall copies a user downloaded before the removal; for those, send your request to the business that contacted you.

Depending on the law where you live, you have these rights over your data:

• Vietnam (Article 4, Law on Personal Data Protection No. 91/2025/QH15): to be informed about processing; to consent, refuse or withdraw consent; to view and correct; to request provision, deletion or restriction of processing and to object to processing; to complain, denounce, sue and claim damages.
• European Union (GDPR): access, rectification, erasure, restriction, data portability, and objection to processing based on legitimate interests; you may object to direct marketing at any time, after which your data is no longer processed for that purpose; and you may complain to a data protection supervisory authority.
• California (CCPA/CPRA): to know, delete and correct your data, and to opt out of its sale or sharing. Orova does not sell personal data and does not share it for cross-context behavioral advertising. You will not be treated differently for exercising these rights.
• Other countries: similar rights under the law where you live.

Users can delete searches and delete and block leads directly in 1clicklead. Send any other request to contact@orova.vn; we may ask for minimal information to verify that the data is yours, and we respond within 5 business days.

• Connections are encrypted over HTTPS.
• Sign-in uses one-time email codes; no passwords are stored.
• Each account can see only its own data; internal access is limited to people who need it to run the service.
• Block lists are stored as one-way hashes.

No system is perfectly secure. If a data breach occurs, Orova will handle it and notify the competent authorities and affected people as the law requires.

1clicklead uses essential cookies to keep you signed in and remember your language. 1clicklead currently uses no advertising or tracking cookies. If we add any, we will update this policy and ask for consent where the law requires.

When this policy changes, the date at the top of this page changes too. Material changes are announced in advance by email or in the app.

For any question about personal data or to exercise your rights: contact@orova.vn. We respond within 5 business days.

This policy is governed by the laws of Vietnam and does not take away mandatory rights that the law where you live grants you.