Privacy policy

1. Overview of data protection

This privacy policy explains what happens to personal data when you visit this website or request beta access. Personal data is any information that can identify you directly or indirectly.

How we collect data

You provide some data directly, for example when you enter an email address to request beta access or contact us by email. Technical data may also be collected automatically when you access the website, including browser, device, request, and network information.

How we use data

We process data to deliver and secure the website, manage beta-access requests, respond to messages, and understand aggregate website usage.

2. Controller

The controller responsible for processing personal data on this website is:

3. General information

Legal bases

Where processing is necessary to perform a contract or take steps at your request before entering a contract, the legal basis is Article 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, the legal basis is Article 6(1)(c) GDPR. Where processing is necessary for our legitimate interests and your interests or fundamental rights do not override them, the legal basis is Article 6(1)(f) GDPR. If we request consent for a specific processing activity, the legal basis is Article 6(1)(a) GDPR.

Storage duration

Unless a more specific period appears below, we retain personal data only while needed for the purpose for which it was collected. We delete data after that purpose ends unless a legal obligation, security incident, or legal claim requires longer retention.

Recipients and processors

We use service providers for hosting, infrastructure, analytics, and email communication. They receive personal data only as needed to provide their services and, where required, act under data processing agreements. We may also disclose data when law requires it or when necessary to establish, exercise, or defend legal claims.

Where personal data is transferred outside the European Economic Area, we rely on an applicable adequacy decision or appropriate safeguards under Chapter V GDPR, such as the European Commission’s standard contractual clauses.

Encryption

This website uses TLS encryption to protect data in transit. You can identify an encrypted connection by the https:// address in your browser. Internet communication can still have security gaps, and absolute protection from third-party access is not possible.

4. Hosting

This website and the OrbitPush application run on infrastructure provided by:

Hetzner processes technical and operational data as our processor so that we can provide a reliable and secure website. Processing is based on our legitimate interest in secure and reliable service delivery under Article 6(1)(f) GDPR. We have concluded a data processing agreement with Hetzner. More information appears in Hetzner’s privacy policy.

5. Server log files

When you access the website, the hosting infrastructure may process technical request data in server logs. This can include your IP address, request date and time, requested resource, referrer URL, browser type and version, operating system, hostname, and response status.

We use server logs to deliver the website, maintain stability and security, diagnose errors, and investigate abuse. We do not combine these logs with unrelated data sources. Processing is based on our legitimate interest under Article 6(1)(f) GDPR. Log data is deleted when no longer needed for these purposes, unless a security incident, legal obligation, or legal claim requires longer retention.

6. Fathom Analytics

We use Fathom Analytics, a privacy-focused website analytics service provided by Conva Ventures Inc., BOX 37058 Millstream PO, Victoria, British Columbia, V9B 0E8, Canada. Fathom helps us understand aggregate website usage and improve OrbitPush.

Fathom processes page and referrer information, approximate country, browser and device information, and technical request data including IP address and user agent. Fathom does not use cookies or similar identifiers. It combines IP address, user agent, hostname, and a site-specific daily salt into a hash used to count unique visits. The salt is rotated and the visitor hashes are deleted. OrbitPush receives aggregated statistics rather than individual visitor profiles.

Fathom states that requests from visitors in the EU are processed on EU-located infrastructure through its EU Isolation system. Processing is based on our legitimate interest in measuring and improving this website with data-minimising analytics under Article 6(1)(f) GDPR. Fathom acts as our processor.

More information appears in Fathom’s data journey, privacy policy, and data processing agreement.

7. Beta access requests

When you request beta access, we process the email address you enter. The form sends the address to the OrbitPush application at app.orbitpush.run, where it is stored in the OrbitPush database on Hetzner-hosted infrastructure. We use it to manage your request and contact you about access.

Processing is necessary to take steps at your request before entering a contract under Article 6(1)(b) GDPR and supports our legitimate interest in managing the beta programme under Article 6(1)(f) GDPR. Pending requests are deleted after no more than 12 months or immediately after withdrawal. After an invitation, the waitlist record is deleted within 30 days.

This section covers beta-access requests submitted through this website. Invitations, accounts, and use of the OrbitPush application will be covered by a separate application privacy policy.

8. Contact by email

If you contact us by email, we process your email address, message, and any information you provide to respond. Email service providers may process correspondence as necessary to provide email delivery and storage.

The legal basis is Article 6(1)(b) GDPR where your message concerns a contract or pre-contractual request, and otherwise our legitimate interest in answering enquiries under Article 6(1)(f) GDPR. We delete correspondence when the matter is resolved unless statutory retention duties or legal claims require longer retention.

9. Your data protection rights

Subject to applicable law and the relevant conditions, you have the following rights. To exercise them, email hello@orbitpush.run.

Access, rectification, and erasure

You may request information about whether we process your personal data and receive a copy of that data. You may also request correction of inaccurate or incomplete data and deletion when the legal requirements are met.

Restriction of processing

You may request restriction of processing, particularly when:

• you contest the accuracy of your data while we verify it;
• processing is unlawful and you request restriction instead of deletion;
• we no longer need the data, but you need it for legal claims; or
• you object to processing while the balancing assessment is pending.

Data portability

For data processed automatically on the basis of consent or a contract, you may request the data you provided in a structured, commonly used, machine-readable format. You may request direct transfer to another controller where technically feasible.

Right to object

Where processing is based on Article 6(1)(e) or (f) GDPR, you may object at any time for reasons arising from your particular situation. We will stop processing the affected data unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or processing is necessary for legal claims.

Withdrawal of consent

Where processing is based on consent, you may withdraw consent at any time for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to complain

You may lodge a complaint with a data protection supervisory authority, particularly in the EU member state where you live, work, or believe an infringement occurred. This right exists without prejudice to other administrative or judicial remedies.

10. Changes to this policy

We may update this policy when our services, processing activities, or legal obligations change. The date at the top shows the latest revision.