Privacy Policy
At Orybit, we are committed to safeguarding personal data and respecting your privacy across all software products, developer tools, and client interactions.
Privacy Commitment
We never sell, rent, or trade your personal data. We only process information required to engineer high-performance software, manage client accounts, secure infrastructure, and fulfill our contractual commitments.
1. Introduction and Scope
This Privacy Policy describes how Orybit ("we", "us", or "our") collects, uses, stores, and protects personal information when you visit our website (orybit.com), contact our team, use our SaaS platforms, or partner with us for software engineering services.
By interacting with our services, you consent to the data collection and usage practices detailed in this policy. If you do not agree with this policy, please do not use our services or submit personal information.
2. Information We Collect
We collect information in three ways: directly provided by you, automatically through your use of our platforms, and from trusted third parties.
A. Information You Provide Directly
- Contact Data: Full name, email address, phone number, company name, and job title when completing inquiry forms or subscribing to newsletters.
- Project Information: Technical requirements, project briefs, architectural specifications, and budget ranges shared during consultations.
- Account Credentials: Usernames, encrypted passwords, and profile details for client dashboards and SaaS access.
- Billing Data: Invoicing details, tax identifiers, and payment transaction metadata (credit card numbers are processed directly by PCI-DSS certified payment processors and never stored on our servers).
B. Information Collected Automatically
- Log Data: Internet Protocol (IP) address, browser type and version, operating system, referring URL, pages viewed, time stamps, and request latencies.
- Device and Telemetry Data: Hardware model, screen resolution, error logs, and system performance metrics collected to ensure application stability.
3. How We Use Information
We use the data we collect solely for legitimate business operations, including:
- Delivering, maintaining, and enhancing custom software development and cloud products.
- Responding to customer inquiries, quotes, support requests, and scheduling discovery calls.
- Processing contract payments, sending invoices, and managing client accounts.
- Monitoring and hardening platform security, detecting anomalies, and mitigating cyber threats.
- Analyzing user engagement patterns to optimize user interfaces and system performance.
- Complying with applicable legal obligations, tax filings, and law enforcement directives.
4. Legal Bases for Processing
Under the General Data Protection Regulation (GDPR) and international privacy laws, we process personal information on the following legal grounds:
- Contract Performance: Processing necessary to execute a contract with you or take preparatory steps prior to entering a contract.
- Legitimate Interests: Processing necessary for our legitimate interests (such as ensuring application security, fraud prevention, and service quality), provided those interests do not override your fundamental rights.
- Consent: When you provide clear, explicit consent for specific purposes (such as subscribing to our newsletter). You may revoke consent at any time.
- Legal Obligation: Processing required to comply with statutory accounting, reporting, or regulatory mandates.
7. Data Security Measures
We implement enterprise-grade technical and organizational safeguards to protect your personal data against unauthorized access, destruction, loss, or alteration. These measures include:
- End-to-end TLS 1.3 encryption for all data in transit and AES-256 encryption for sensitive data at rest.
- Role-based access controls (RBAC) and mandatory multi-factor authentication (MFA) for studio personnel.
- Automated vulnerability scanning, container security audits, and continuous CI/CD pipeline code analysis.
- Regular encrypted database backups with geographically distributed failover redundancy.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required to comply with legal, accounting, and audit obligations. When personal data is no longer required, it is permanently deleted or irreversibly anonymized.
9. Your Privacy Rights
Depending on your geographical jurisdiction (including the EU under GDPR and California under CCPA/CPRA), you may hold the following rights regarding your personal data:
- Right to Access: Request a copy of the personal information we maintain about you.
- Right to Rectification: Request correction of inaccurate, incomplete, or outdated data.
- Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data where no overriding legal obligation exists.
- Right to Restrict Processing: Request suspension of data processing under certain criteria.
- Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing communications.
To exercise any of these rights, please contact our Data Protection Officer at hello@orybit.com. We respond to verified requests within 30 days.
10. International Transfers
Because Orybit operates globally, information may be transferred to and maintained on secure cloud servers outside of your home country. In all cross-border data transfers, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission.
11. Children's Privacy and Age Consent
Our digital platforms and engineering services are strictly directed to individuals who are at least 16 years of age (or the minimum legal age for consenting to data processing in your jurisdiction). We do not knowingly solicit or collect personal information from minors. If you believe a minor has submitted personal data without parental or guardian consent, please contact us immediately to facilitate prompt investigation and complete data deletion.
12. Data Deletion and Subject Access Requests
You have the right to request the permanent deletion of your personal data ("Right to Erasure" under GDPR Article 17 and CCPA). To initiate a verified data deletion or subject access request:
- Send an email to hello@orybit.com with the subject line
Data Deletion Request. - Include the full name and email address associated with your submissions or client account.
- We will acknowledge receipt within 48 business hours and process the verified erasure of your records from our databases, logs, and backups within 30 days, providing you with written confirmation.
13. Stock Image and Media Licensing
All third-party stock photography, conceptual illustrations, and demo imagery used on this website are properly licensed under the Unsplash License, Pexels License, or relevant Creative Commons commercial licenses. Proprietary UI screenshots, brand logos, code snippets, and original product media remain the exclusive intellectual property of Orybit.
14. Contact Our Privacy Team
If you have questions, feedback, or concerns regarding our privacy practices or this policy, please reach out directly:
Orybit Privacy & Data Protection
- Email: hello@orybit.com
- Phone: +1 (415) 555-0142
- Address: 88 Market Street, San Francisco, CA
Let's build what's next.
Pick a starting point — web, mobile, cloud or AI. We'll come back within 24 hours with a plan and a team.