1. Our Commitment to GDPR
Orbitova is committed to compliance with the EU General Data Protection Regulation (GDPR). We respect the rights of individuals over their personal data and apply the same standard of care to all users globally, regardless of jurisdiction.
2. Data We Collect
- Account information: name, email, profile photo, designation, phone (optional)
- Usage data: login times, feature usage, browser type, IP address
- Uploaded files: project files, deliverables, and media you store on Orbitova
- Communications: messages, comments, and feedback you create within the platform
3. Legal Basis for Processing
- Contract: processing necessary to provide the Orbitova service you signed up for.
- Legitimate interest: improving the product, preventing abuse, and ensuring security.
- Consent: for optional features such as marketing emails. You can withdraw consent at any time.
4. Your Rights
- Right of access: request a copy of the personal data we hold on you.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure: request deletion of your account and associated data.
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to restriction: limit how we process your data in specific circumstances.
- Right to object: object to processing based on legitimate interest.
5. How to Exercise Your Rights
To exercise any of the rights above, email hello@orbitova.in with the subject line "GDPR Request". Include your registered email address and the specific right you wish to exercise. We will respond within 30 days.
6. Data Retention
- Active accounts: data is retained for as long as your account remains active.
- Deleted accounts: personal data is removed within 30 days of deletion.
- Billing records: retained for 7 years to comply with applicable tax and accounting laws.
7. Data Transfers
Orbitova servers are located in India. We use Supabase as our database and storage provider. Where data is transferred outside the EU, we rely on appropriate safeguards including Standard Contractual Clauses where applicable.
8. Data Protection Officer
For any data protection inquiries, our Data Protection Officer can be reached at hello@orbitova.in.
9. Updates to This Policy
We may update this GDPR Policy from time to time. The "Last updated" date above reflects the latest revision. Material changes will be communicated via email or in-app notification.