Terms of Service & Privacy Policy

1. Acceptance of these Terms

By purchasing, accessing, or using the Service, you confirm that you have read, understood, and agree to be bound by these Terms of Service, the Privacy Policy below, and the Refund Policy. If you are using the Service on behalf of an organisation, you represent that you are authorised to bind that organisation to these Terms.

2. The Service

OrinLink provides a virtual private network (VPN) service through nodes we operate in multiple regions. The regions currently available, the available plan durations, the included data allowance for each plan, and the prices are those shown on oricweb.com at the time of purchase, which we may add to or change from time to time. Each subscription permits an unlimited number of simultaneously connected devices per account.

3. Eligibility

You must be at least 18 years old, or the age of majority in your jurisdiction, to purchase or use the Service. You are responsible for ensuring that your use of a VPN, and of the Service, is lawful in the jurisdiction from which you access it.

4. Your account

When you purchase the Service, you are issued an OrinLink ID (ORIC-XXXXXX), which serves as your username. Setting a password is optional: you can check the status of an order at any time using your Order ID or OrinLink ID, and you may set a password later in order to sign in to your account dashboard.

You are responsible for maintaining the confidentiality of your OrinLink ID and password and for all activity that occurs under your account. If you lose access to both your OrinLink ID and password, account recovery requires proof of your original payment (for example, the cryptocurrency transaction hash or your Stripe receipt).

5. Acceptable use

You agree not to use the Service to engage in, facilitate, or conceal any unlawful activity, including but not limited to: distributing malware or engaging in hacking or unauthorised access to systems; sending spam or conducting network attacks; infringing the intellectual property rights of others; or the exploitation, distribution, or storage of child sexual abuse material.

As described in the Privacy Policy below, we do not monitor, inspect, or log your activity while you are connected to the Service, and we do not do so in order to police compliance with this section. However, if we become aware of a violation of these Terms — for instance through an abuse report from a hosting or network provider, a valid legal order, or another external source — we may suspend or terminate the account concerned without refund, and we will cooperate with law enforcement to the extent required by applicable law.

6. Payments, plans & renewals

Prices are displayed in US dollars (USD). We accept payment in USDT (BEP-20, on the BNB Smart Chain) and by card through Stripe (including Apple Pay and Google Pay). Your subscription activates automatically once payment is confirmed.

Renewing a subscription extends your current expiry date and adds the renewed period's data allowance to your account; renewal does not change the nodes assigned to your account. Cancellations and refunds are governed by our Refund Policy.

7. Service availability

We aim to provide a reliable service, but we do not guarantee that the Service will be uninterrupted, error-free, or available at all times. Nodes may require maintenance or be affected by circumstances beyond our reasonable control, including actions of upstream network and infrastructure providers. The Service is provided on an "as is" and "as available" basis.

8. Inactive accounts

If your subscription expires and is not renewed, we retain your account for 180 days so that you can return and resume where you left off. After that period, the account becomes eligible for deletion.

9. Suspension & termination

We may suspend or terminate your account, without refund, if you breach Section 5 (Acceptable use), or where we reasonably suspect payment fraud — for example, a card dispute raised in bad faith after the Service has been delivered. You may stop using the Service at any time; the treatment of any payment already made is governed by the Refund Policy.

10. Intellectual property

The OrinLink name, logo, website, and software are owned by us and are protected by applicable intellectual property laws. These Terms grant you a limited, non-exclusive, non-transferable right to use the Service for its intended purpose; they do not transfer any ownership rights to you.

11. Disclaimers & limitation of liability

To the fullest extent permitted by applicable law, the Service is provided without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

To the fullest extent permitted by applicable law, OrinLink shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of data, profits, or goodwill, arising out of or in connection with your use of, or inability to use, the Service. Where liability cannot be excluded, our total aggregate liability arising out of or relating to the Service shall not exceed the amount you paid to us for the Service in the twelve (12) months preceding the event giving rise to the claim.

12. Changes to these Terms

We may update these Terms from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Service after a change takes effect constitutes your acceptance of the revised Terms.

13. Governing law

These Terms, and any dispute or claim arising out of or in connection with them or the Service, are governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region of the People's Republic of China, without regard to its conflict-of-laws rules. You agree to submit to the non-exclusive jurisdiction of the courts of Hong Kong.

1. Overview

This Privacy Policy explains what information we collect, how we use it, and the choices you have. We have designed the Service to collect as little personal information as reasonably possible. By using the Service, you agree to the practices described here.

2. Information we collect

To operate your subscription, we hold the following:

• Your OrinLink ID — a randomly generated identifier that also serves as your username; it is not derived from any personal information.
• Your password — if you choose to set one, we store only its Argon2id hash; we cannot see or recover your actual password.
• Your Order ID and order details — including the order's status and timestamps (when it was created and paid, and when your subscription begins and expires), the plan purchased, and the amount paid.
• Payment information — which method you used (cryptocurrency or card). For cryptocurrency payments, we record the sending wallet address and the transaction hash, both of which are already public on the blockchain. For card payments, see Section 4.
• Your subscription link and QR code — the credential your device uses to connect to our nodes.
• Email address — optional. We do not currently request or use an email address; the field is reserved for possible future account notifications.

3. Information we do not collect

We do not log, monitor, or store the websites you visit, your connection timestamps, or any other record of your activity while you are connected to a node. This has been a deliberate design decision since the Service was first built, across every node and the central system; the platform is not configured to record such information.

4. How we use information — and card payments

We use the information described in Section 2 to provision and maintain your access to the Service, to process payments, to prevent fraud and abuse, and to respond to you when you contact us for support.

Card payments are processed by Stripe. Any billing name and card details you enter are submitted directly to Stripe and are governed by Stripe's own privacy policy; we never receive, see, or store your card number. Stripe independently applies its own verification checks and may, for example, decline a payment where the information entered appears invalid.

5. Disclosure to third parties

We do not sell, rent, or trade your information. We do not disclose your information to any third party — including resellers, advertisers, or government authorities — except where we are compelled to do so by valid legal process issued by a competent court or authority with jurisdiction over us, and then only to the minimum extent legally required. Because we do not log your connection or browsing activity in the first place (see Section 3), there is very little we are able to provide even in response to such a request.

Two service providers necessarily handle a narrow slice of information in order for the Service to function: Stripe, which processes card payments, and our VPN node infrastructure, which requires your OrinLink ID and device connections in order to grant access. Neither arrangement is a sale or resale of your information.

6. Data retention

We retain order and account records for six (6) months after an account becomes inactive (that is, in addition to the 180-day grace period described in Section 8 of the Terms), after which they become eligible for deletion. Encrypted backups of our database are kept separately for disaster-recovery purposes and are cycled in the ordinary course.

7. Security

We take reasonable measures to protect your information. Passwords are hashed with Argon2id, a modern, salted password-hashing algorithm, and are never stored in plain text. Database backups are encrypted using AES-256. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Your rights

You may request deletion of your account and its associated data at any time by contacting us with your OrinLink ID, subject to any records we are legally required to retain (such as payment or tax records). Because the OrinLink ID is not linked to your identity and we do not log your activity, the information we hold about you is inherently limited.

9. Cookies & local storage

We use your browser's local storage to remember your language preference, and a signed session cookie to keep you signed in to the account dashboard. We do not use third-party tracking, analytics, or advertising cookies.

10. Children

The Service is not directed at, and must not be used by, anyone under the age of 18 (or the age of majority in their jurisdiction). We do not knowingly collect information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.