Privacy Notice

Who is responsible

[Legal business name] operates Orbitly and is the data controller for personal data about our customers (account holders). For analytics collected on our customers' websites, we act as a processor on their behalf.

Data we collect and why

• Account data (email, login credentials): to create and run your account — contract performance.
• Support messages: to help you — contract performance and legitimate interests.
• Usage and device data on our own site (pages viewed, browser, approximate location): to secure and improve the service — legitimate interests.
• Website visitor analytics for customers: page path, referrer, country/city, device and browser. IP addresses are used momentarily to derive location and a daily anonymous hash, and are never stored.

Who we share data with

• Service providers such as hosting and database providers.
• Paddle.com, our Merchant of Record, for sales, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting).
• Authorities where required by law.

Retention

Account data is kept while your account is active and deleted within 30 days of closure. Analytics data is kept for your plan's history period, then deleted.

Your rights

Depending on where you live (for example under US state privacy laws), you may have the right to access, correct, delete or obtain a copy of your data, and to opt out of certain processing. We do not sell personal data. Contact [support email] to make a request.

Security

We use encryption in transit, access controls and row-level permissions so customers only see their own data.

Cookies

The Orbitly tracking script sets no cookies. Our own app uses essential browser storage only to keep you signed in.