Privacy Policy

1. Overview

OrbitSuite, Inc. ("we", "us", "our") operates orbitsuite.cloud. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Service, you agree to the practices described here.

2. Information We Collect

We collect the following categories of information:

• Account data — name, email address, password hash, billing details
• Usage data — agent task submissions, API calls, feature interactions, session metadata
• Technical data — IP address, browser/OS type, log files, error reports
• Payment data — processed by Stripe; we do not store raw card numbers
• Communications — emails or messages you send to our support team

3. How We Use Your Information

• Provide, operate, and improve the Service
• Process payments and manage subscriptions
• Send transactional emails (receipts, alerts, account notices)
• Respond to support requests
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We do not sell your personal data to third parties.

4. Data Sharing

We share data only with:

• Service providers — Stripe (payments), AWS (infrastructure), Auth0 (authentication), Sentry (error monitoring) — bound by data processing agreements
• Legal authorities — when required by law, court order, or to protect our rights
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Log data is retained for up to 90 days. You may request deletion of your account and associated data at any time (see Section 8).

6. Cookies & Tracking

We use essential cookies for authentication and session management. We may use analytics cookies to understand usage patterns. You can disable non-essential cookies in your browser settings, though this may affect Service functionality.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage for sensitive data, access controls, and audit logging. No system is 100% secure; we encourage you to use a strong, unique password and enable any available MFA options.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)

To exercise these rights, contact us at cockpit@orbitsuite.cloud. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notice at least 14 days before they take effect. Continued use of the Service after changes constitutes acceptance.

11. Contact

OrbitSuite, Inc. · Buffalo, NY
cockpit@orbitsuite.cloud · +1 (716) 254-8282