Privacy Policy

Orbit LM is operated by Carlos Caue Ribeiro de Oliveira. Business contact address: Rua Francisco Viana, 191, Super Quadra Morumbi, São Paulo, SP, 05750-220, Brazil. Website: orbit-lm.com. Contact for privacy, billing and service questions: tblsestudio@gmail.com. If an organization uploads your information as its client or team member, that organization determines the purposes of those workspace records. Contact it first about those records; Orbit can assist with requests about its own processing.

For account access we process your name, email, salted password hash, sign-in sessions, plan status and the preferences you choose. New self-service registrations through Orbit’s sign-up form record the Terms version and acceptance time; checkout providers maintain their own purchase records. Profile contact, address, biography, company and avatar fields are optional; leave them blank if unnecessary.

Workspace information is what you or authorized users enter: leads, client contacts, projects, tasks and notes, invoices, payments, expenses, groceries, savings and recorded investments. We use it to save, organize, display, export and perform the features you select. Do not upload information you lack authority to process.

Checkout providers supply subscription and transaction identifiers, billing email and payment status so we can apply purchased access and handle billing. You enter payment-card details with the checkout provider, not in Orbit workspace forms. Technical request information, IP addresses and error/security logs are processed to deliver, protect and troubleshoot the service.

Where GDPR or similar law applies, account and requested workspace services are processed to perform our agreement with you; legally required accounting or compliance records are processed to meet legal obligations; proportionate security, abuse prevention and support administration rely on our legitimate interests, subject to your rights. Information submitted by a business about its clients also requires that business to establish its own lawful basis.

Saved food and calorie history is optional and requires a separate explicit health-data choice. It is restricted to your own account and is not shared through workspace membership. Calculator inputs are processed locally. Read the separate Consumer Health Data Privacy notice for fields, recipients, withdrawal and deletion.

Support processes the messages you submit to answer questions. Signed-in conversations are stored for support follow-up; anonymous support uses the current browser session. Starting a new signed-in conversation closes the previous thread; it does not erase its stored messages.

Google Gemini assistance is off unless you explicitly enable it in the support panel. If enabled, your submitted message and up to six recent conversation snippets, plus limited product context such as the current page and plan features, may be sent to Google to generate a response. Orbit does not automatically attach client, financial or health records. Do not put passwords, payment-card details or sensitive records in messages. You can turn AI off for future messages while continuing to use first-party guidance.

Gmail and Google Calendar connections are optional and separately authorized. Gmail authorization requests sending access and email identity, not general inbox-reading access. Calendar authorization permits the event operations needed by the calendar features. Orbit stores connection tokens and processes the recipients, message content and event details needed for features you use. Task notes may become part of a synchronized calendar event; avoid including unnecessary sensitive details.

Google user data is used for the connected features, not advertising, sale to data brokers or general-purpose AI model training. Orbit LM’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Revoke provider access in Google account connections. Previously granted permissions may be broader than newly requested permissions; revoking and reconnecting updates that grant. Revocation stops authorized future provider access but does not automatically delete records already saved.

Vercel provides hosting; Supabase stores account and workspace records; Resend delivers configured service emails; Hotmart handles current checkout and subscriptions. Some earlier purchases used Stripe. Google handles authorized Gmail/Calendar requests and optional Gemini support. These services receive information needed for their roles and have their own terms. Market and exchange-rate requests use symbols or currency pairs rather than your full workspace records.

People you authorize to share workspace records can access the categories made available to them; food history is excluded. Invoice and email recipients receive what you send or schedule. Uploaded profile avatars use publicly accessible image URLs: avoid sensitive photos and contact us for storage deletion. Information may also be disclosed when lawfully required or necessary to address fraud or security incidents. Orbit does not sell personal information or share it for cross-context behavioral advertising.

The application uses authentication/security cookies and browser storage for preferences and support you choose. Google Analytics has been removed; no optional advertising or analytics script is loaded by Orbit. The current application does not change behavior in response to Do Not Track because it does not perform that tracking. See the Cookie Policy for names, lifetimes and controls. External checkout and authorized provider pages use their own storage practices.

Workspace records remain while you use the service until removed through available controls or a verified deletion request. Supported soft-deleted leads, clients and projects are scheduled for removal after three calendar months; ordinary archiving is not deletion. This schedule does not cover all data categories. Food history can be removed in Health even after consent is withdrawn.

Support messages, financial audit records, service logs, backups and provider records have separate retention needs and no single application-wide expiry. Some records may need to remain for security, disputes or legal accounting duties. Request account-wide deletion at the contact above; cancellation of a payment-provider subscription is a separate action. We will explain any required retention or inability to erase a category when responding. Available report exports are not a complete copy of every personal-data category.

Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection, withdraw optional consent, and complain to your data protection authority. Email tblsestudio@gmail.com with the account email and type of request. Do not send identity documents or sensitive history in the initial email. We may verify identity using proportionate steps. Optional health consent and AI choices can be withdrawn in their features; withdrawal does not invalidate earlier lawful processing. If we decline a request, you may ask us to reconsider and contact the relevant regulator. Mandatory statutory rights are not limited by this notice.

Providers may process information in the United States and other countries outside your location. Applicable international-transfer safeguards, processor agreements and regulatory obligations depend on the processing and your jurisdiction. Contact us for the arrangements relevant to your data. Password hashing, session controls and server authorization reduce risk, but no system guarantees absolute security.

Orbit is intended for adults and is not directed to children under 18. Do not create an account or submit personal information if you are under 18. If we learn that a child has submitted information, contact us so we can investigate and arrange appropriate removal. We update the date when this notice changes and provide further notice or request a new choice when required for material changes.