Privacy policy

This policy covers the ORION website, SaaS platform, support, commercial communications and future mobile reporting applications.

TROYANTECHNOLOGY SAS, tax ID 0993374929001, Guayaquil, Ecuador, operates ORION. It is the controller for account, billing, security and support data.

Hotel customers generally control the guest, employee and operational data they enter; ORION acts as their technology provider.

• Identity, account, company, branch and role data.
• Billing details, payment references and receipts.
• Hotel stays, customer invoicing details, sales, inventory and housekeeping activity.
• IP address, device, audit events, diagnostics and notification tokens.

We process data to provide the service, authenticate users, enforce permissions, process payments, generate reports, deliver alerts, provide support, prevent fraud and comply with law, based on contract, legal obligations, legitimate interests or consent as applicable.

Hosting, email, monitoring, storage and payment providers may receive only the data required for their service under confidentiality and security commitments. Appropriate safeguards apply to international processing.

Data is retained for the customer relationship and the additional periods required for accounting, tax, security and legal claims. Customers may request export or deletion subject to legal retention duties and backup cycles.

You may request access, correction, deletion, objection, restriction, portability or withdrawal of consent where applicable by contacting privacy@orion-pms.com.

ORION uses tenant isolation, role-based access, encrypted credentials, audit logs and backups. Material policy changes will be communicated through reasonable channels.