Privacy Policy

1. Who processes your data

Your data is processed by Orbita, a company based in Georgia, which is responsible for it (the data controller). Questions and requests: [email protected].

For content placed in an organisation account (chat, files, recordings) the organisation decides who adds what and how long it is kept; we process that data on its instructions.

2. What we collect

• Account: name, e-mail, password (stored only as a hash), language and time zone. If you sign in with Google, we receive your name, e-mail address and Google account identifier from Google.
• Organisation: name, members and their roles, invitations.
• Content: chat messages, files, voice messages, meetings and their participants (including invited guests’ e-mail addresses).
• Calls: who joined, when and for how long. Call audio and video pass through our media server and are not stored unless recording or AI analysis is enabled.
• Recordings and AI analysis: if a host records a call, the recording is stored; if the organisation enabled AI analysis (and did not switch it off for the meeting), participants’ audio, a transcript and a summary are stored.
• Payments: plan, amount, currency and payment status. Card details are handled by Flitt — we do not store card numbers.
• Technical data: IP address, browser and device, sign-in records — for security and session management; your country — to show prices in your local currency.
• Live Demo: the name a visitor types in — kept for 24 hours.

3. How we use it

• to provide the service and manage your account (performance of the contract);
• to process payments and subscriptions;
• for service e-mails: invitations, meeting reminders, password resets, billing;
• for security, preventing abuse and fixing errors (legitimate interest);
• for AI analysis of calls — only when the organisation enables it;
• to meet legal obligations (for example, tax records).

We do not sell your data or use it for advertising.

4. Who we share it with

We share data only with the providers that help us run the service, and only as much as they need:

• Flitt — card payment processing;
• Resend — sending service e-mails;
• Cloudflare — DNS, network protection and country detection;
• Google — signing in with Google, if you choose it (Google’s button loads on the sign-in pages); call transcription and AI summaries (Gemini) when AI analysis is enabled; Google Drive — if an organisation connects its own Drive;
• Anthropic — code and demo generation in the AI Workspace, when you use it;
• the hosting provider whose servers run Orbita.

Some providers process data outside Georgia; we use only reputable providers that offer appropriate data-protection safeguards. Data is disclosed to public authorities only where the law requires it.

5. How long we keep it

• account data — for as long as the account exists;
• chat, files and recordings — until the user or organisation deletes them; an organisation can set an automatic deletion period;
• all data of an unpaid organisation — 7 days from the notice sent to its owner, unless it is paid within that time (see the Terms of Service);
• Live Demo visits — 24 hours;
• payment and accounting records — for the period required by Georgian law.

6. Your rights

Under the Law of Georgia on Personal Data Protection you have the right to request information about and a copy of your data, to have it corrected, deleted or its processing restricted, to withdraw consent and to object to processing. Write to [email protected]. You can also contact the Personal Data Protection Service of Georgia (personaldata.ge).

7. Cookies

We use only necessary cookies: for your sign-in session, for security (CSRF protection) and to remember your choices (language, currency, time zone, interface settings). We do not use advertising or analytics cookies.

8. Security

Connections are encrypted (HTTPS/TLS), passwords are stored only as hashes, access to data is restricted, and an organisation administrator viewing history is recorded in the audit log.

9. Children

Orbita is not intended for people under 16, and we do not knowingly collect their data.

10. Changes

When we update this policy the date at the top of the page changes; we will notify you of material changes.