Privacy Policy

Last updated: 27 October 2026

Orbit (“Orbit”, “we”, “us”) is a software platform operated by OS Technologies, a proprietorship registered in India (Udyam: UDYAM-TS-25-0084002), located at 1-64, Main Road, Atnur, Block 2, Sangareddy, Telangana 502251, India.

This policy explains what information we collect when businesses use Orbit and when their customers interact with those businesses through Orbit (for example on WhatsApp), how we use it, and the choices available. It is written to meet India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the requirements of the platforms we connect to, including Meta’s WhatsApp Business Platform.

1. Who is responsible for what

• Businesses using Orbit (our customers) decide what data about their own customers is collected and why. For that data, the business is the data fiduciary and Orbit acts as its data processor, handling it only on the business’s instructions.
• OS Technologies is the data fiduciary for information about the businesses themselves — account owners, their staff accounts and billing.

2. Information we collect

From businesses (account owners and staff):

• Name, phone number, email address, business name, address and similar registration details
• Business settings: templates, rules, prices, FAQs, automations and message templates
• Records the business adds, such as customer lists, rooms, appointments, invoices and tickets
• Usage and device information such as log-in times, IP address and browser type, used for security

About the business’s customers (processed on the business’s behalf):

• WhatsApp phone number and profile name
• Messages they send to the business, and replies sent to them
• Details the business keeps about them, such as name, room or booking, dues and payment status, and requests or complaints

Payments: payments are processed by licensed payment gateways. We receive confirmation that a payment happened (amount, time, reference). We do not receive or store card numbers, UPI PINs or bank passwords.

3. How we use information

• To provide Orbit: replying to customer messages, sending bills, reminders and receipts, creating tickets and showing the business its dashboard
• To let the business customize Orbit through its assistant, with every change previewed and logged
• To secure accounts, prevent misuse and fix problems
• To send service messages about the account, such as billing or security notices
• To meet legal obligations

We do not sell personal data, and we do not use a business’s customer data to advertise to those customers.

4. Artificial intelligence

Orbit uses AI models to understand messages and suggest replies or actions. Message content may be sent to our AI service provider only to generate a response for that business. We do not allow it to be used to train public AI models. Actions involving money or important changes follow fixed rules and, where needed, the business owner’s approval.

5. Sharing with service providers

We share data only with providers that help us run Orbit, under contracts that require them to protect it:

• Meta Platforms (WhatsApp Business Platform), to send and receive WhatsApp messages
• Payment gateways, to create payment links and confirm payments
• Cloud hosting and database providers, to store and run the service
• AI model providers, to understand and draft messages
• SMS / email providers, for log-in codes and account notices

We may also disclose information when required by law or to protect the rights, safety and security of users and the public.

6. Storage and security

Data is stored with reputable cloud providers. Each business’s data is logically separated so one business cannot see another’s. We use encryption in transit, access controls and activity logs. No system is perfectly secure; if a breach affects personal data, we will notify affected parties and authorities as required by law.

7. How long we keep data

We keep data for as long as the business’s account is active, or as needed to provide the service. When an account is closed, or on a valid deletion request, we delete or anonymise the data within 30 days, except where we must keep certain records (for example invoices) to comply with law.

8. Your rights

Under the DPDP Act you may ask to access, correct, update or erase your personal data, withdraw consent, and raise a grievance. If you are a customer of a business that uses Orbit, you can contact that business directly or write to us and we will route your request to them. To stop WhatsApp messages from a business, reply STOP to that business.

See how to request deletion of your data.

9. Children

Orbit is meant for businesses and is not directed at children. Businesses that serve minors (such as coaching centres) are responsible for obtaining the consent required by law from parents or guardians.

10. Changes to this policy

We may update this policy as Orbit changes. We will post the new version here with a new “last updated” date, and notify account owners of important changes.

11. Contact and grievance officer