Privacy Policy

1. Information We Collect

We collect only the information needed to respond to enquiries and operate this site:

• Contact details you provide. When you submit our contact form, we collect the name, email address, and message (including any project details) you choose to share.
• Technical and usage data. Our servers and hosting provider automatically process standard request data (such as IP address and browser user-agent) to deliver and secure the site.
• Security audit data. For abuse-prevention on form submissions, we store only irreversibly hashed identifiers derived from request metadata — we do not retain your raw IP address or user-agent in our database.

We do not use third-party analytics, advertising, or cross-site tracking technologies.

2. How We Use Your Information

• To respond to your enquiries and provide requested information or proposals.
• To communicate with you about a potential or ongoing engagement.
• To operate, secure, and improve the website and prevent fraud or abuse.
• To comply with legal obligations.

3. Legal Basis for Processing

Under the DPDP Act we process personal data based on your consent and for legitimate uses such as responding to a request you initiated. Under the GDPR, our legal bases are: consent (Art. 6(1)(a)), steps taken at your request prior to a contract (Art. 6(1)(b)), and our legitimate interests in responding to enquiries and securing our services (Art. 6(1)(f)).

4. Sharing and Data Processors

We do not sell your personal data. We share it only with service providers (“data processors”) that help us operate, and only as needed:

• Vercel — website hosting and delivery.
• Resend — transactional email delivery for enquiry notifications.
• Managed PostgreSQL database provider — secure storage of enquiry records.

These providers may process data outside India. Where required, such transfers rely on appropriate safeguards (e.g. standard contractual clauses). We may also disclose data when required by law.

5. Data Retention

We retain enquiry data for as long as necessary to respond and pursue a potential engagement, and thereafter only as required for legal, accounting, or security purposes. You may request deletion at any time (see Your Rights below).

6. Your Rights

Subject to applicable law, you have the right to access, correct, update, and erase your personal data; to withdraw consent; to grievance redressal; and (under the GDPR) additionally to restrict or object to processing, to data portability, and to lodge a complaint with a supervisory authority. To exercise any right, email us at hello@orbithive.com.

7. Data Security

We apply reasonable technical and organisational measures to protect personal data, including encryption in transit (HTTPS), scoped access controls, hardened session cookies, and storing only hashed audit identifiers. No method of transmission or storage is fully secure, however, and we cannot guarantee absolute security.

8. Children's Privacy

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

9. Grievance Officer

In accordance with the DPDP Act, you may contact our Grievance Officer regarding this policy or your personal data:

• Name: [REVIEW] Add Grievance Officer name
• Email: hello@orbithive.com
• Address: [REVIEW] Add your registered business address

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Please review it periodically.