Privacy Policy

01What information we collect

We collect the information you give us, information created when you use the Service, and a limited amount of technical information. We do not buy personal information from third parties.

02Account information

Your email address, used to create your account and send one-time sign-in codes. We do not collect passwords.

An optional phone number, if you choose to add one. It is private and is not currently verified.

Authentication records maintained by our authentication provider, such as account identifiers, sign-in times and session tokens.

03ORBI profile information

The system-assigned ORBI ID and the position colour you choose. These are public.

The display name, optional handle and optional bio you enter. Each is private to you unless you choose to publish it: every one starts hidden, and nothing is public until you turn it on. You can change each choice on your Account page. A field you publish is visible to anyone using the Service.

04Position information

The coordinate of your Position, its cell number, whether it carries Founding status, your Founding number if it does, and the time it was claimed. This information is public, because the ORBI field shows who holds which Position.

The ORBI field is a public register of Positions. By default it shows only your ORBI ID, Position and position colour, and the other details above. It shows your display name, handle or bio only if you have chosen to publish that field: nothing is published unless you turn it on, and if you do nothing, nothing about your name is shown. You can hide a field again on your Account page; once hidden it is removed from what ORBINTU shows. Anything that was public while it was public may have been copied by others, and we cannot recall those copies. Your email address, phone number, sign-in details and security information are never shown on the field.

05User content

Once ORBI features are available, the information you choose to give ORBI about your work, needs and goals. This content is private to your account unless you choose to share it. No such processing takes place on the Service today.

06Connected services

Connecting third-party applications is planned and not yet available. When it is, we will process data from a Connected Service only within the scope you authorise, and we will describe it here before the feature launches.

07Technical and usage information

Our website host, [READY TO FINALIZE ON DEPLOYMENT — Cloudflare, Inc. (Cloudflare Pages)], receives standard request information, such as IP address, requested URL, time and browser user agent, as a necessary part of serving web pages, and keeps it under its standard log retention. ORBINTU adds no request logging of its own. Our authentication and database provider keeps its own service logs for requests to the account backend.

The website does not use analytics tools, advertising trackers or fingerprinting, and ORBINTU’s own code sets no cookies. Browser storage used for sign-in and for an in-progress claim is described in the Cookie / Browser Storage Policy.

08How information is used

We use information to:

• create and secure your account and sign you in;
• display your public ORBI identity and Position;
• allocate Positions and determine Founding status;
• operate, maintain, debug and protect the Service;
• communicate with you about your account and material changes;
• comply with legal obligations.

We do not sell personal information and do not use it for third-party advertising.

09AI processing

When ORBI and NTU features become available, your User Content may be processed by AI systems, including models operated by third-party providers, in order to form and carry out the work you ask for. The AI + Data Terms describe this in detail.

We do not use your content to train AI models. We use content to improve the product only when you explicitly send it to us as feedback.

The ORBI and NTU demonstrations on this website use a fixed, scripted example and do not process your personal information.

10Service providers

We use service providers that process information on our behalf, under contract, for the purposes above:

11Data sharing

Beyond our service providers, we share information only: when you make it public (the profile fields you choose to publish, and your ORBI ID and Position); when you direct us to, such as through a Connected Service you authorise; to comply with law or valid legal process; to protect the rights, safety and security of users, the public or ORBINTU; or as part of a merger, acquisition or similar transaction, subject to this policy.

12Data retention

Retention periods will depend on the type of data and the reason for processing. We keep account and profile information for as long as your account is active and for a limited period after, as needed for security, dispute resolution and legal obligations.

13Security

We use technical and organisational measures designed to protect information, including row-level access rules that restrict each account’s private data to its owner, a separate public view that excludes email and phone, and server-side control of Position ownership. What is live today and what is planned is listed on the Trust page.

No system is perfectly secure, and we cannot guarantee the security of information.

14International processing

Account, profile and Position data is stored by our authentication and database provider in its Mumbai, India region (AWS ap-south-1). Our other service providers may process information in other countries, including the United States.

Where the law requires a safeguard for an international transfer, we rely on the safeguards in each provider’s data processing terms, such as Standard Contractual Clauses.

15Your rights and choices

Depending on where you live, you may have rights to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent.

You can see your account, profile and privacy settings on the Account page, and you can change what is public there at any time: each of your display name, handle and bio is switched PUBLIC or HIDDEN on its own, and the MINIMAL PROFILE setting hides all three. Self-service account deletion is not available yet; until it is, make deletion requests, and any other request, through hello@yuvi.it.com. We may need to verify your identity before acting on a request. We aim to complete deletion requests within 30 days, or sooner where the law requires; the steps are described in the Terms.

You may also have the right to complain to your local data-protection authority.

16Children and age requirements

The Service is not directed to children. You must be at least 18 years old to create an account, as set out in the Terms. If we learn we have collected information from someone below that age without appropriate consent, we will delete it.

17Changes to this policy

We will update this policy as the Service changes, and before any new category of processing (such as AI processing of your content or Connected Services) begins. Material changes will be announced through the Service or by email.

18Contact

The controller of your information is [LEGAL ENTITY NAME — TO BE CONFIRMED], [REGISTERED ADDRESS — TO BE CONFIRMED]. Privacy questions and requests: hello@yuvi.it.com.