Privacy policy

Who operates Orbit

Orbit is operated as an Indian sole proprietorship. The operator’s legal identity, business contact details and appointed grievance officer are listed on our legal information and grievances page.

For privacy requests or complaints, email support@oorbit.in. Our complaint process explains how to submit a grievance, the applicable response times and review options.

Information we collect

• Account and profile details, including your name, email, date of birth, gender, interests and profile photos.
• Location information, with your permission, to find nearby plans and people, plus the homebase you choose.
• Content and activity, including plans, circles, messages, photos, attendance, reactions, reports and reputation activity.
• Device, usage and security information, including device type, operating system, push notification tokens and service logs.
• Booking, payment, refund and supplier tax information when you use paid features.
• Your email and city when you join the website waitlist. Joining the waitlist does not create an Orbit app account.

How we use and share information

We use information to operate Orbit, connect you with nearby plans and circles, deliver messages and notifications, personalize recommendations and advertising, calculate reputation, process bookings and payments, handle support and reports, prevent fraud and abuse, and meet legal obligations.

Your profile and content are visible to other people according to the feature and its visibility settings. Service providers process information needed to deliver their services. We may share information where required by law or to protect people and the service.

We do not sell personal information. Aggregated or anonymized information may be shared with advertising partners. Contact support about your advertising and privacy choices.

Service providers and processing

Orbit uses Supabase for authentication, Neon for its app database, Cloudflare R2 for media, Mapbox for maps, Expo and platform notification services for push notifications, and Razorpay for payments. The website waitlist uses a separate Supabase database. Our hosting and infrastructure providers also process information needed to run these services.

Information may be processed outside your country, including in the regions used by these providers. We use access controls and encryption in transit to protect information. No system can guarantee complete security.

Location and device permissions

You can change location, camera, photo and notification permissions in your device settings. Location supports nearby discovery; camera and photo access support the features you choose to use. Restricting a permission may limit the corresponding feature.

Profile face verification

With your acknowledgement, Orbit sends your chosen profile photo and a short video selfie to Amazon Rekognition for face detection, liveness and comparison. Orbit stores verification outcomes and the notice you accepted. Your active profile photo and verification result remain with your account.

AWS processing and retention follow its own terms. Read the profile face verification privacy notice for the full processing, photo cleanup, retention and withdrawal details.

Circle Vibes photos and moderation

Vibes photos are normalized, stripped of embedded image metadata and stored privately in Cloudflare R2. Normalized images are sent to Amazon Rekognition for content screening. Authorized staff can review flagged photos and reports. This screening does not identify people or tag attendees.

Removing a photo stops new access through Orbit. Stored image cleanup normally completes within 24 hours; rejected previews expire after 7 days. Resolved reports and moderation audit entries are retained for 90 days. Open reports and pending reviews remain until resolved. Copies already downloaded by others cannot be recalled.

Supplier tax identity verification

Paid suppliers provide PAN, legal name, tax registration and address information. With explicit permission, Orbit shares PAN, legal name and date of birth or incorporation with Sandbox Financial Technologies Private Limited and/or its applicable contracting affiliate for verification. GSTIN checks also support supplier onboarding and compliance.

The versioned notice shown during tax setup explains the information shared, verification evidence and retention. Withdrawal stops future checks; it does not erase existing refund, settlement, tax or filing obligations. Sandbox processing and retention follow its applicable terms.

Retention and account deletion

We keep personal information while your account is active or it is needed to provide the service. You can request account deletion in the app or by email without reinstalling it.

Once deletion is scheduled, there is a 30-day grace period. Logging back in during that period cancels the request. After the period ends, scheduled cleanup removes the app account and associated personal data, subject to the retained records described below.

Payment, invoice, tax, refund, settlement and related evidence may remain for applicable legal obligations and unresolved claims. A minimal account-deletion record is retained to prevent an old sign-in session from recreating a deleted account. Moderation records follow the periods above. Information already copied by another person, including content in their replies, may remain.

Retention depends on the record and applicable obligation. Contact support@oorbit.in for the retention details applicable to your records. Waitlist email removal is separate from app account deletion and can be requested at the same address.

Your choices, rights and support

Contact support@oorbit.in to request access, correction, deletion or withdrawal of permission, ask about retention, or raise a privacy grievance. Depending on your location, you may also have rights to portability, restriction or objection, and to complain to the relevant authority.

Orbit uses automated recommendations, reputation calculations and verification checks. Contact support to ask for human review of a decision affecting you.

Orbit is intended for adults aged 18 and over. If you believe we have collected a child’s information, contact support so we can investigate and remove it where appropriate.