Privacy Policy

Who we are

Orbit (Android package com.sifattech.orbit, and the Orbit web app) is a workspace for managing clients, projects, tasks, meetings, invoices, finances and payroll. This policy explains what data the app handles, why, and the choices you have. Questions: sifat27.ht@gmail.com.

Data we collect

• Account details — your name, email address and password (stored only as a secure hash by our authentication provider).
• Workspace content you add — clients and their contacts, projects, tasks, comments, todos, meetings, invoices, income and expenses, team members, payroll records and files you upload.
• Device push token — a Firebase Cloud Messaging token that lets us send notifications to your phone, linked to your account.
• Basic technical data — the server logs our hosting providers keep (such as IP address and request times) to run and secure the service.

What we don't collect

Orbit does not access your location, contacts, camera, microphone or photos (except a file you choose to upload). It shows no ads, uses no advertising identifiers and does not sell or rent your data to anyone.

How we use your data

• To provide the service: sign you in, store your workspace and show it to the people you invite.
• To send notifications you'd expect: task assignments, comments, approvals, due-date and overdue reminders.
• Meeting, task and todo reminders 5 minutes before they start are scheduled locally on your device; their content is not sent anywhere.
• To send emails you trigger, such as team invitations and invoices to your clients.
• To keep the service secure and fix problems.

Who we share it with

Only with service providers that run Orbit on our behalf, under their own privacy and security terms:

• Supabase — database, authentication and file storage.
• Google Firebase Cloud Messaging — delivering push notifications.
• Resend — sending invitation and invoice emails.

Inside a workspace, data is visible to members according to the roles the workspace owner sets, and to client contacts only through the client portal for projects marked visible to them. We may disclose data if the law requires it.

Security

Data is encrypted in transit (HTTPS) and at rest by our providers. Database row-level security limits every request to the data the signed-in user is allowed to see. No method of storage is perfectly secure, but we work to protect your information.

Retention and deletion

We keep your data while your account is active. To delete your account and its data, email sifat27.ht@gmail.com from the address you signed up with; we delete it within 30 days, except records we must keep by law. Signing out of the app removes this phone's push token. Uninstalling the app removes all data stored on the device.

Your rights

You can view and edit your data in the app, and ask us for a copy, a correction or deletion at any time by email.

Children

Orbit is a business tool and is not directed at children under 13. We do not knowingly collect data from them.

Changes

If this policy changes we will update this page and the date below. Significant changes will be announced in the app.