Privacy Policy

1. Who we are

Darko Bros Ltd ("we", "us") operates Orbit, a relationship-mapping service (the "Service"). We are registered in England and Wales, company number 16084920, with our registered office at 20 Wenlock Road, London, England, N1 7GU.

We are the data controller for the personal data described in this policy. You can contact us about anything in this policy at info@orbit-app.co.

2. Personal data we collect

Account data. When an account is created for you, we hold your email address, your role within the Service, and a securely hashed version of the password you choose. We never store your password in a readable form.

Usage and log data. Our hosting infrastructure records standard server logs, including IP addresses and request details, which we use for security and to keep the Service running reliably.

Customer content. Organisations using the Service add their own content — people, relationships, notes, images and documents — which may include personal data about individuals. For that content the organisation is the data controller and we act as their processor, under the data processing terms in our Terms of Use. If you believe an organisation holds information about you in the Service, contact that organisation or email us and we will pass your request on.

Emails. We send only transactional emails: account invitations, password resets and email-change confirmations. We do not send marketing email.

3. How we use your data

• To provide the Service and manage your account — necessary to perform our contract with you or your organisation.
• To keep the Service secure and diagnose problems, including server logs — our legitimate interests in running a safe, reliable service.
• To comply with legal obligations that apply to us.

We do not sell personal data, and we do not use it for advertising or profiling.

4. Who we share data with

We use a small number of service providers (processors) to run the Service. They may only process data on our instructions:

Only the text of a document submitted to the import feature is sent to Anthropic. Account data (such as email addresses and credentials) and other content stored in the Service are never sent to Anthropic, and Anthropic does not use data we send for training its models.

We may also disclose data where required by law.

5. International transfers

Data is stored in the UK. Where a provider processes data outside the UK (Anthropic, in the USA), the transfer is safeguarded by recognised transfer mechanisms — the UK Extension to the EU–US Data Privacy Framework and/or the UK Addendum to the EU Standard Contractual Clauses, as set out in that provider's data processing agreement.

6. Cookies

We use only cookies that are strictly necessary for the Service to work. We do not use analytics, advertising or any other tracking cookies, which is why the Service has no cookie banner.

7. How long we keep data

We keep account data for as long as your account is active, and delete it within a reasonable period after the account or your organisation's use of the Service ends. Server logs are kept for a limited period for security purposes. Customer content is retained and deleted according to our agreement with the organisation that added it.

8. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing of your data;
• receive a copy of your data in a portable format.

To exercise any of these rights, email info@orbit-app.co. Where the data in question is customer content controlled by an organisation using the Service, we will pass your request to that organisation.

9. Complaints

If you have a concern about how we handle your data, please contact us first at info@orbit-app.co. We will acknowledge your complaint within 30 days and respond as quickly as we can.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Changes to this policy

If we change this policy we will update this page and the date at the top. If a change significantly affects how we handle your data, we will let account holders know by email.