On this page
Applicability
This Privacy Policy governs the collection, use, and disclosure of information by Orbitra ("Orbitra", "we", "us", or "our") through our marketplace management platform and website (collectively, the "Services"). It applies to registered merchants who connect their sales channels and manage listings, orders, and inventory through Orbitra, as well as to visitors of our website.
We process personal information in accordance with applicable laws and regulations, following industry best practices for data protection.
Purpose and Scope
This policy applies primarily to information collected through our website and application. It documents how we collect information from merchants and visitors, and how information obtained on a merchant's behalf from connected marketplaces and sales channels is handled under our agreements with those merchants.
How We Collect Information
From Registered Merchants
When you create an Orbitra account, we collect your first name, last name, email address, and password.
Through Marketplace Connections
When you connect a sales channel such as Shopify, Amazon, eBay, or WooCommerce, we access product, inventory, order, and listing data from that channel through its official API on your behalf, strictly to provide the syncing and management features you request.
Through Automated Means
Technical data such as device type, browser, operating system, and IP address is collected automatically to help us secure and improve the Services.
During Transactions
Billing and subscription details, including plan type, invoice history, and payment confirmation, are collected when you subscribe to a paid plan. Payment card details are handled directly by our payment processor and are never stored on our servers.
Types of Information We Collect
- First and last name
- Email address
- Company or store name
- IP address and device information
- Marketplace account and connection details
- Product, order, and inventory data synced from connected channels
How We Use Your Information
- Providing and operating the Services, including syncing products, orders, and inventory across your connected channels
- Authenticating your account and keeping it secure
- Responding to support requests and communicating service updates
- Sending product updates or newsletters you have opted into
- Improving and maintaining the Services through aggregated usage analytics
- Billing, invoicing, and subscription management
- Complying with our legal or statutory obligations
Internal Data Access
Access to your information within Orbitra is limited to team members who need it to provide the Services — including engineering, customer support, and billing — on a need-to-know basis.
Data Retention
We retain information for as long as needed to operate your account, provide support, meet legal and tax obligations, and prevent fraud or abuse. Retention periods vary depending on the type of data and the purpose for which it was collected.
Security
We implement administrative, managerial, and technical safeguards designed to protect your personal information, including encryption in transit, access controls, and regular security reviews. No method of transmission or storage is completely secure, and we encourage you to also take steps to protect your own account.
Your Rights Under GDPR
- Right to Access — obtain a copy of the personal data we hold about you
- Right to Rectification — correct incomplete or inaccurate information
- Right to Erasure — request deletion of your data when it is no longer necessary
- Right to Restrict Processing — limit how we process your data in certain circumstances
- Right to Object — object to processing based on legitimate interests or direct marketing
Additional Rights for California Residents
- Right to Know — request details of the categories and specific pieces of personal information we have collected
- Right to Deletion — request removal of your personal information
- Right to Non-Discrimination — no penalty for exercising your privacy rights
- Right to Opt-Out — we do not sell personal information, so there is nothing to opt out of
Children's Privacy
Our Services are not directed to children under sixteen. If we become aware that we have inadvertently collected personal information from a child, we will delete it promptly.
Third-Party Links
Our Services may link to third-party websites, including connected marketplaces. This policy does not apply to those sites, and we encourage you to review their privacy policies separately.
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated by email or through an in-app notice. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.
Contact Us
If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@orbitra.io.
Back to Sign In