Privacy Policy

Introduction

This Privacy Policy describes how Orbit ("we," "us," or "our") collects, uses, and shares information about you when you use the Orbit web app and mobile app (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. This policy applies to all users who access or use the Service.

Information We Collect

We collect several types of information in connection with the Service:

• Information you provide directly: name, email address, business name, business type, profile picture, and any client, booking, invoice, or note data you enter into Orbit.
• Information collected automatically: device information, IP address, browser type, app version, operating system, crash reports, and basic usage analytics.
• Information from third-party services: when you subscribe to Orbit or your clients pay through an Orbit payment link, our payment processor Paystack shares transaction status, settlement details, and a verification reference with us - but never card numbers or banking credentials. If you connect Google Calendar, we receive the calendar access needed to sync your bookings.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Personalize your experience and remember your preferences
• Understand how the Service is used so we can improve it
• Communicate with you for support and important account notices
• Process transactions and send related receipts or reminders
• Send technical notices, updates, and security alerts
• Comply with legal obligations

How We Share Your Information

We may share your information in the following limited circumstances:

• Service providers: we share information with vendors that operate parts of the Service for us - Supabase (database and authentication), Paystack (payment processing), our email delivery provider (account and client emails), Groq (AI features such as drafted messages, only when you use them), and Google (calendar sync, only if you connect it).
• Legal requirements: we may disclose information if required by law or valid legal process.
• Business transfers: we may share information in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

Your Data, Your Property

Cookies and Tracking

We use cookies and similar tracking technologies to keep you signed in, remember preferences, and analyze usage of the Service. You can instruct your browser to refuse cookies, but parts of the Service may not function as expected without them.

Third-party services we integrate with - such as payment processors - may set their own cookies on their hosted payment pages.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to keep it longer for legal or accounting reasons.

Your Rights Under the GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: ask us to correct inaccurate or incomplete information.
• Right to erasure: ask us to delete your personal data in certain circumstances.
• Right to restriction: ask us to limit how we use your data.
• Right to data portability: request your data in a machine-readable format.
• Right to object: object to our processing of your data based on legitimate interests.

To exercise any of these rights, please contact us at the email below. We will respond within 30 days.

Lawful basis for processing: we process your personal data on the basis of consent, contract performance, legitimate interests, and legal obligations as applicable.

Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Data Security

We implement appropriate technical and organizational measures to protect your information against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure. Passwords are hashed, traffic is encrypted in transit, and access to production data is restricted.

No method of transmission or electronic storage is 100% secure, however, so we cannot guarantee absolute security.

Third-Party Links

Our Service may contain links to third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new policy and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us: