Privacy Policy

1. Who we are

Orbit Agentic Sales ("Orbit", "we") is operated by . This policy explains how we handle personal data when you visit our site or use the Orbit service. Contact: .

2. Our two roles

Account data — for the people who sign up and use Orbit (name, email, password hash, security settings, language) we are the controller.

Workspace data — for the companies and business contacts our customers add to their workspace, the customer is the controller and we act as their processor, handling that data only on their instructions and under our data processing terms.

3. What we collect

Account and usage data: name, work email, workspace name, role, sign-in times, IP address for security and rate limiting, and an audit log of actions taken in the workspace.

Workspace content: companies, business contact details, notes, knowledge-base items, drafts and reply records that customers enter or import.

Public web data fetched at a customer's request: pages of a company's own website, careers pages, public job boards, newsrooms and public tender notices. We do not crawl LinkedIn or social networks.

4. How we use it

To provide and secure the service, to research the accounts a customer chooses, to generate drafts for human review, to send system email (invitations, password resets), to prevent abuse and to meet legal obligations. We do not sell personal data and we do not use workspace data to train AI models.

5. AI processing

Drafts are generated by Anthropic's API using the customer's own API key. Only the information needed for the draft (the approved brief, approved knowledge items and the evidence for that account) is sent. Every draft is reviewed by a person before any use.

6. Service providers

We use a small number of sub-processors: our hosting provider (servers and database), Anthropic (AI drafting, under the customer's key) and our transactional email provider. An up-to-date list is available on request.

7. International transfers

Where data moves across borders we rely on the safeguards required by applicable law (for example contractual clauses) and keep transfers to what the service needs.

8. Retention

Account data is kept while the account is active. Workspace data is kept until the customer deletes it or closes the workspace, after which it is deleted from live systems within 30 days and from backups on their normal rotation. Do-not-contact records are kept so that opt-outs keep being honoured.

9. Security

Passwords are hashed with scrypt, stored secrets are encrypted (AES-256-GCM), workspaces are isolated at database level, and two-factor authentication is available and can be enforced. Access is logged.

10. Your rights

Depending on where you live (for example under GDPR, the Egyptian PDPL, the Saudi PDPL or the UAE PDPL) you may have rights to access, correct, delete, restrict or object to processing, to data portability and to withdraw consent. If your data is in a customer's workspace, contact that customer; we will help them respond. Otherwise write to us at . You may also complain to your data protection authority.

11. Cookies

We use only essential cookies: a session cookie to keep you signed in and a language preference cookie. We do not use advertising or tracking cookies.

12. Changes

We will post any changes on this page and update the date above; material changes will be notified to account owners by email.