Privacy Policy

2.1 Account and Business Information When an organisation creates an Orbiter9 account, we may collect organisation/company name, authorised user names, email address, phone number, account/login information, business address, tax or registration information where required, subscription/plan information, and information provided during onboarding or support.

2.2 User and Access Information We may collect name, email, phone number, user role and permissions, login/authentication information, login dates/times, IP address, device/browser information, and security/audit-log information.

2.3 Customer Business Data Customers may enter or upload products and SKUs, inventory, warehouses, stock movements, purchases, sales, orders, customers and suppliers, production information, raw materials, production planning information, pricing and commercial information, invoices and business documents, notes and other information entered into the Services. Such information may contain personal information relating to employees, customers, suppliers, vendors or other individuals.

2.4 Website and Technical Information We may automatically collect IP address, browser type, operating system, device information, pages/features accessed, date/time, referring URLs, application logs, error logs, security/authentication logs, and performance/usage information.

2.5 Cookies and Similar Technologies We may use cookies, local storage, session technologies and similar mechanisms to maintain login sessions, remember preferences, improve functionality, maintain security, understand website usage, diagnose problems and improve Services. You may control cookies through browser settings.

Orbiter9 does not currently store credit card numbers, debit card numbers, CVV/CVC numbers, PINs, internet banking passwords or similar sensitive payment credentials on its systems.

Where payments or subscriptions are processed through a third-party payment provider, payment information may be collected and processed directly by that provider under its own policies.

We may receive limited transaction information such as payment status, transaction/reference ID, amount, currency, subscription information, payment date, and refund/payment-failure information.

We do not require or intentionally collect your full card credentials.

We may use information to create/manage accounts; provide, operate and maintain Orbiter9; authenticate users and manage permissions; process subscriptions/payments; provide support; communicate about accounts, services, maintenance, security or important changes; maintain security; detect fraud, abuse and unauthorised access; troubleshoot and improve performance; develop/improve Services; generate operational and usage analytics; comply with legal obligations; enforce agreements and protect rights; and for other purposes permitted by applicable law.

For business information uploaded or entered into Orbiter9, the customer generally determines what information is entered and for what business purpose.

The customer remains responsible for obtaining necessary permissions, notices and consents; ensuring lawful use; ensuring submitted information is accurate and lawful; managing users/access permissions; and determining what personal or business information should be stored.

Where we process personal information on behalf of a customer organisation, we process it to provide the Services and in accordance with the customer's lawful instructions and applicable law.

We do not sell customer business data or personal information to third parties.

We may disclose information where reasonably necessary to service providers such as cloud hosting, database infrastructure, content delivery, email, authentication, monitoring/logging, security, support, analytics, payment processing, backup and disaster recovery providers.

We may disclose information to comply with law, governmental/regulatory requests or court orders, protect rights/property/safety, or investigate fraud, security incidents or unlawful activity.

If Deepspace9 undergoes a merger, acquisition, restructuring, financing, sale of assets or similar transaction, information associated with the Services may be transferred as part of that transaction, subject to applicable law.

We implement reasonable technical and organisational safeguards designed to protect information against unauthorised access, alteration, disclosure, destruction or loss, including where appropriate access controls, authentication, encryption in transit, secure infrastructure, logging/monitoring, role-based permissions, backups and security monitoring.

No internet-based system can be guaranteed completely secure. Customers are also responsible for maintaining appropriate account security.

We retain information as reasonably necessary to provide Services, maintain business/transaction records, meet contractual obligations, comply with legal/regulatory/accounting requirements, resolve disputes, enforce agreements and protect legitimate business interests.

When no longer required, information may be deleted, anonymised or securely disposed of, subject to applicable law and legitimate retention requirements.

After termination, customer data may remain available for a limited period for account closure, export, dispute resolution, legal compliance, backups and security requirements. Following the applicable retention period, data may be deleted or anonymised. Backup copies may remain for a limited period as part of routine backup/disaster recovery.

Where technically available under the applicable plan, customers may export business data before account termination. Customers are responsible for requesting and completing export within the applicable period.

Subject to applicable law, individuals may have rights to request access, correction, deletion where legally applicable, withdraw consent where processing is based on consent, raise grievances, and exercise other rights available under applicable data protection law.

Requests may be submitted to support@orbiter9.com. We may require reasonable information to verify identity and authority. Where information is controlled by a business customer, we may direct the individual to that customer.

Depending on infrastructure, service providers and customer location, information may be processed or stored in jurisdictions other than the user's jurisdiction. Where required, we will take appropriate measures in accordance with applicable law.

Orbiter9 may integrate with or contain links to third-party websites, applications, payment providers or services. Deepspace9 does not control third-party privacy practices. Their processing is governed by their own policies and terms.

We may create statistical, aggregated or anonymised information from usage of Orbiter9 for product improvement, performance analysis, business analytics, service optimisation, security analysis, research/development and marketing or industry analysis. Properly anonymised or aggregated information will not be used to identify a particular customer or individual.

We may update this Privacy Policy from time to time. For material changes, we may provide notice through the Services, website, email or another reasonable method.

Deepspace9 Technologies Private Limited

Delhi, India