Privacy Policy

1. Introduction

Orbit OS, LLC ("Orbit", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Orbit platform and related services ("Platform"). By using the Platform, you consent to the practices described in this Privacy Policy.

2. Information We Collect

We collect several categories of information:

Account Information: Name, email address, phone number, profile photo, occupation, city/location, and professional background information you provide during registration or onboarding.

Usage Data: Feature interactions, scan history, business ideas generated, content created, storefront activity, login times, device information, browser type, IP address, and pages visited.

Transaction Data: Sales records, payout history, subscription payments, royalty calculations, and tax-related information. We do not collect or store full payment card details — these are handled directly by our PCI-compliant payment processor.

Communications: Emails, support tickets, feedback, and survey responses you send to us.

AI Interaction Data: Prompts you submit to AI tools, generated outputs, and your ratings or feedback on AI-generated content (used solely to improve your experience).

3. How We Collect Information

We collect information directly from you when you register, complete your profile, use Platform features, or contact support. We also collect information automatically through cookies, log files, and similar technologies. We may receive information from third-party partners (e.g., authentication providers if you sign in with Google) with your consent.

4. How We Use Your Information

We use your information to: operate and maintain the Platform; personalize AI recommendations and business suggestions; process payments and payouts; send service-related notifications and updates; provide customer support; analyze usage trends to improve our product; detect fraud and prevent abuse; and comply with legal obligations.

5. Legal Basis for Processing

We process your personal information based on: (a) your consent (e.g., for marketing communications); (b) contractual necessity (to provide the Platform services); (c) legal obligation (e.g., tax reporting); and (d) legitimate interests (e.g., fraud prevention, product improvement, network security).

6. How We Share Your Information

We share data only with trusted service providers necessary to operate the Platform, including: payment processors (Stripe), cloud hosting providers, email delivery services, and analytics providers. All providers are contractually bound to use your data only for the specific services they provide to us and are prohibited from selling your data. We may also disclose information if required by law, to protect our rights, or in connection with a business transfer (e.g., merger or acquisition).

7. AI & Machine Learning

Content you generate using Orbit’s AI tools is used solely to fulfill your requests and improve your personal experience within the Platform. We do not use your business ideas, product descriptions, or personal data to train external third-party AI models without your explicit consent. Any model training we conduct uses aggregated, de-identified data only.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information for longer periods as required by law (e.g., tax records for 7 years) or for legitimate business purposes (e.g., fraud prevention). When you delete your account, we will delete or de-identify your personal information within 30 days, except where retention is required by law.

9. Security Measures

We employ industry-standard security measures including TLS encryption for data in transit, AES-256 encryption for sensitive data at rest, access controls, regular security audits, and employee training. However, no internet-based system can be 100% secure. You are responsible for maintaining the confidentiality of your password and for any activity under your account.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the right to: access the personal information we hold about you; request correction of inaccurate information; request deletion of your personal information; object to or restrict certain processing; request a portable copy of your data; and withdraw consent where processing is based on consent. To exercise these rights, contact privacy@orbitos.co or use the controls in your account settings.

11. Cookies & Tracking Technologies

Orbit uses essential cookies for authentication, session management, and security. We use functional cookies to remember your preferences (e.g., dark mode). We use analytics cookies (via privacy-respecting analytics) to understand how users interact with the Platform. You can control cookies through your browser settings. We do not use third-party advertising cookies or tracking pixels for ad targeting.

12. Do Not Track

Some browsers support a "Do Not Track" (DNT) signal. Orbit does not currently respond to DNT signals because there is no consistent industry standard for how to interpret them. However, our analytics practices are designed to be privacy-respecting and we do not engage in cross-site tracking for advertising purposes.

13. Children's Privacy

Orbit is not directed to children under 16 years of age, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@orbitos.co and we will promptly delete such information.

14. International Data Transfers

Orbit is operated from the United States. If you access the Platform from outside the US, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate. By using the Platform, you consent to such transfers. We implement appropriate safeguards (such as Standard Contractual Clauses) for international transfers as required by applicable law.

15. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

16. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, without undue delay, and will take all reasonable steps to mitigate the breach and prevent future occurrences.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Material changes will be communicated via email or through the Platform at least 30 days before taking effect. Your continued use of the Platform after changes constitutes acceptance.

18. Contact Information

For privacy-related questions, concerns, or requests, contact our Data Protection Officer at privacy@orbitos.co or by mail at: Orbit OS, LLC, Attention: Privacy, PO Box placeholder, Houston, TX 77001.