Privacy Policy

This Privacy Policy describes how Orbitshape ("we," "us," or "our") collects, uses, and protects your personal information when you visit our website, make a purchase, or subscribe to our services. We are committed to protecting your privacy and handling your data transparently.

1. Information We Collect

Information you provide directly:

• Contact form submissions — your name, email address, and message content
• Purchase information — your email address and billing details (processed by Stripe; we do not store full card numbers)
• Account information — email address and any profile details you provide when creating a subscription account

Information collected automatically:

• Server logs — IP address, browser type, operating system, referring URL, pages visited, and timestamps
• Session data — essential cookies required for site functionality (see our Cookie Policy)

Information we do NOT collect:

• Full credit card or debit card numbers (handled entirely by Stripe)
• Social media profiles or data from third-party platforms
• Location data beyond what is present in your IP address
• Data from tracking pixels, social widgets, or advertising networks

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order fulfillment — to process purchases, generate download links, and deliver your Guides
• Subscription management — to manage your plan, billing, and account access
• Customer support — to respond to inquiries and resolve issues
• Communication — to send purchase confirmations, download links, and important service updates
• Site improvement — to understand how visitors use our site and identify areas for improvement
• Security — to detect and prevent fraudulent activity and abuse

3. Data Sharing

We do not sell, trade, rent, or share your personal information with third parties for marketing purposes. We share data only in the following limited circumstances:

• Stripe — payment data is shared with Stripe for transaction processing, governed by Stripe's Privacy Policy
• Legal requirements — we may disclose information if required by law, regulation, legal process, or governmental request
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

4. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this policy:

• Purchase records — retained for the duration required by applicable tax and accounting laws
• Contact form submissions — retained for up to 12 months, then deleted
• Account data — retained while your account is active and for 30 days after deletion
• Server logs — retained for up to 90 days

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• HTTPS encryption for all data in transit
• Secure server infrastructure with regular security updates
• Limited access to personal data on a need-to-know basis
• Stripe PCI Level 1 compliance for all payment processing

While we take reasonable steps to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal retention requirements)
• Portability — request your data in a structured, machine-readable format
• Objection — object to certain types of processing
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us. We will respond within 30 days.

7. International Transfers

Our services are hosted and operated in the EU (Frankfurt, Germany). If you are accessing our services from outside the EU, please be aware that your data may be transferred to, stored, and processed in the EU. By using our services, you consent to this transfer.

8. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Material changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us.