Privacy Policy
Last Updated: 2026-07-01
1. Introduction
Welcome to OrbitaTools ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you visit our website or use our SaaS platform, tools, and services.
2. Data Controller
OrbitaTools acts as the data controller for the personal information we process, unless otherwise stated. If you have any questions about this Privacy Policy, please contact us using the details in the Contact section below.
3. Information We Collect
We may collect the following types of information:
- Account & Authentication: When you create an account, we store your profile information, authentication identifiers, preferences, and subscription status. We may use third-party authentication providers (such as Clerk or Supabase).
- Contact Data: Includes email addresses and names if you contact support or subscribe to our newsletter.
- Technical Data: Includes your IP address, browser type and version, time zone setting, operating system, platform, and other device information.
- Usage Data: Includes information about how you navigate and use our tools, products, and services.
4. How We Use Information
We use your data for the following purposes:
- To provide, operate, and maintain our tools and services.
- To process transactions and manage subscriptions.
- To improve our website, troubleshoot issues, and develop new features.
- To comply with legal obligations and enforce our Terms of Service.
5. Legal Basis for Processing
Where required by applicable law (such as the GDPR), we process personal data based on one or more of the following legal grounds:
- Your consent.
- Performance of a contract with you.
- Compliance with legal obligations.
- Our legitimate business interests, provided your rights do not override those interests.
6. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to track activity and hold certain information. The cookies we use include Essential, Authentication, Preference, Analytics, and Advertising cookies.
You may manage your cookie preferences through our cookie banner or your browser settings. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
7. Analytics & Advertising
Analytics
We use Google Analytics and similar services to understand how visitors use the website. These providers collect standard internet log information and visitor behavior in an anonymous form.
Advertising & Affiliate Disclosure
We may display advertisements from Google AdSense, Hybrid Ads, and other advertising partners. These providers may use cookies to serve personalized ads based on your prior visits to our website or other websites. Users can control personalized ads through Google's Ads Settings. Some links on our site may be affiliate links, meaning we may earn a commission at no extra cost to you if you click and make a purchase.
8. AI Processing & Automated Decisions
OrbitaTools integrates various AI-powered tools. Some tools send prompts, text, or data to third-party AI providers (such as OpenAI, Google, or Hugging Face). Data submitted to these tools may be processed by those providers according to their respective privacy policies. We strongly recommend avoiding the submission of highly confidential or sensitive personal information to AI processing tools.
Automated Processing
Some features use automated systems and AI models to generate responses or process content. These outputs are generated automatically and may require human review.
9. File Uploads & User Generated Content
Many of our converters, PDF utilities, and image tools process files entirely inside your web browser without ever sending data to our servers.
For tools that require server-side processing, uploaded files are processed strictly to provide the requested service. Files processed on our servers are automatically and permanently deleted immediately after processing unless otherwise explicitly stated.
Unless explicitly stated for a specific feature, user-submitted files, prompts, and generated content are not used to train our own AI models.
10. Payment Processing
If you purchase premium products or subscriptions, payments are securely processed by our payment partner, Stripe. We never store or process your full payment card details directly on our servers.
11. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Server-processed temporary files are deleted immediately after the task completes.
12. International Data Transfers
Your information may be transferred to and maintained on computers located outside of your state, province, or country where data protection laws may differ. We use global infrastructure providers (e.g., Cloudflare, Vercel, Google, Stripe) which may process data in the US, EU, or other regions. We ensure appropriate safeguards are in place for these transfers.
13. Security Practices & Data Breaches
We prioritize the security of your data using industry-standard practices, including:
- Encryption: Data is encrypted in transit using HTTPS/TLS.
- Access Controls: Strict internal access controls and authentication.
- Session Security: Secure, HTTP-only cookies and robust session management.
- Monitoring & Rate Limiting: Active monitoring, SOC Lite audit logging, and rate limiting to prevent abuse.
Security Incidents
If we become aware of a data breach affecting your personal information, we will notify affected users and applicable authorities where required by law.
14. Your Rights (GDPR)
Depending on your location (such as the EU or UK), you have specific rights regarding your personal data:
- Right to Access: Request copies of your personal data.
- Right to Correct: Request correction of inaccurate information.
- Right to Delete: Request the deletion of your personal data.
- Right to Restrict: Request that we restrict the processing of your data.
- Right to Export: Request data portability.
- Right to Withdraw Consent: Withdraw consent at any time where we rely on it to process your data.
15. California Privacy Rights
We do not sell your personal information as defined under the California Consumer Privacy Act (CCPA).
Where applicable, you may request access to, deletion of, or correction of your personal information, and opt out of certain data sharing activities. To exercise any of these rights, please contact us.
16. Children's Privacy
OrbitaTools is not intended for children under 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete it.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be announced through our website or user accounts where appropriate. The "Last Updated" date indicates when this policy was most recently revised.
18. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
- Privacy Questions: privacy@orbitatools.com
- General Support: support@orbitatools.com