Privacy Policy

This Privacy Policy describes the data practices intended for Orbit’s public site and portal. It is a working draft for counsel review. Before launch, Orbit must add its legal entity, privacy contact, retention schedule, vendor disclosures, and any notices required by the jurisdictions where it operates.

Orbit may handle account details, item-submission information, photographs, item and handoff records, support communications, and technical/session data needed to operate and secure the service. Do not submit information you are not authorized to provide.

Orbit uses information to provide and protect accounts, review submissions, coordinate service steps, maintain item records, respond to support requests, communicate about the service, and improve operational reliability. Orbit should disclose any materially different purpose before using information for it.

Information may be shared with service providers that support authorized functions such as hosting, authentication, storage, communications, logistics, or professional services. Any public Orbit Shop listing should use only the approved listing information—not client account details or private item records.

Depending on where you live and the law that applies, you may have rights to request access, correction, deletion, a copy, or limits on certain uses of personal information. California guidance describes rights to know, delete, correct, limit, opt out where applicable, and receive equal treatment for exercising rights. Read the official guidance. Orbit must publish a verified request method and response process before launch.

Orbit uses session and security technology necessary to keep accounts functioning. Orbit may also use Replit-hosted analytics to understand aggregate site usage and improve the service. Analytics is enabled through the published-site platform and is not used to collect secrets or private account and item-submission content.

Orbit should retain information only as long as reasonably necessary for the documented purpose, service records, legal obligations, or dispute resolution. Access controls and technical safeguards should be reviewed as the product, vendors, and markets expand.

Before launch, Orbit must provide a designated privacy contact and an effective date. Material changes should be communicated in a manner appropriate to the change and applicable law.