Privacy Policy

Orbit, Inc. (“Orbit,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, and share information when you use our website and services (collectively, the “Service”).

We collect the following categories of information:

• Account information: name, email address, password (hashed), and organization name provided at registration.
• Usage data: pages visited, features used, queries run, and session duration, collected via server logs and first-party analytics.
• Content: photos, videos, and text you post within the Service. This content is stored and displayed only to members of the groups you post to.
• Communications: messages sent to support, survey responses, and any other direct communications with us.

We use collected information to:

• Provide, maintain, and improve the Service
• Process transactions and send related notices
• Respond to support inquiries and resolve disputes
• Send product updates, security alerts, and promotional messages (with opt-out)
• Monitor usage to detect fraud and enforce our Terms of Service
• Comply with legal obligations

If you are located in the European Economic Area or United Kingdom, our legal bases for processing personal data are:

• Contract performance — to deliver the Service you subscribed to
• Legitimate interests — security, fraud prevention, and service improvement
• Legal obligation — where processing is required by law
• Consent — for marketing communications and certain cookies

We do not sell your personal data. We share information only with:

• Service providers who process data on our behalf under confidentiality obligations (e.g., cloud hosting, payment processing, email delivery, analytics).
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you in advance and encourage you to review the new privacy policy before the transfer takes effect.
• Legal requirements — when required by law, court order, or to protect the rights and safety of Orbit or others.

We retain account information for as long as your account is active or as needed to provide services. After account deletion, we retain logs for up to 90 days for security purposes and billing records for up to 7 years as required by law. Customer data is deleted within 30 days of account termination unless legally required to retain it.

Depending on your jurisdiction, you may have the right to:

• Access and obtain a copy of your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time (where processing is consent-based)
• Lodge a complaint with a supervisory authority

To exercise these rights, email support@orbit.org. We will respond within 30 days.

We implement industry-standard measures including TLS encryption in transit, AES-256 encryption at rest, and access controls. No method of transmission is 100% secure; if you believe your account has been compromised, contact us immediately.

Our services are hosted in the United States. If you are located outside the US, your data will be transferred to and processed in the US. For transfers from the EEA/UK, we rely on Standard Contractual Clauses approved by the European Commission.

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the Service at least 14 days before the change takes effect. The date at the top of this page indicates the last revision.

For privacy-related questions or to exercise your rights, contact our Data Protection Officer at support@orbit.org or write to: Orbit, Inc., Washington State, USA.