Privacy Policy

01Who we are

Orbital QR is operated by Orbital Point. This policy explains what we collect when you use the Service, why we collect it, and the choices you have. For anything unclear, email hello@orbital-point.com.

02What we collect from you

When you sign in and use the Service we store:

• your Google profile basics — name, email address, and avatar — used to create and identify your account (we never see your Google password),
• the content you create: QR codes, short links, link-in-bio pages, uploaded logos and assets, and organization/team settings,
• prompts and settings you submit to the AI Studio, which are processed by our AI providers to generate your assets,
• billing status from our payment processor — we do not store your card details ourselves.

03What we collect from scans and visits

When someone scans one of your codes or visits one of your links or pages, we log technical metadata to power your analytics:

• approximate location derived from the IP address (country and city — we do not store precise GPS locations),
• device, operating system, and browser type,
• the time of the scan or visit, and which code, link, or page it hit.

04How we use this data

To run the Service: redirecting scans, rendering pages, showing you your analytics, processing AI generations, and billing your subscription. We also use aggregate, de-identified usage data to understand and improve the product. We do not sell personal data, and we do not use your content or your visitors’ data for advertising.

05Cookies

We use cookies to keep you signed in to your account (session cookies via Google sign-in). We do not run third-party advertising or cross-site tracking cookies.

06Who we share data with

Only the processors needed to run the Service:

• our hosting and infrastructure providers, which store the Service’s databases and serve traffic,
• Google, to authenticate your sign-in,
• our payment processor, to handle subscriptions,
• our AI providers, to process AI Studio generations you request.

07Retention & deletion

We keep your data while your account is active. Delete your account (or email us) and your personal data, content, and associated analytics are removed from production systems within 30 days, except where the law requires us to keep billing records longer.

08Your rights

You can access, correct, export, or delete your data. Depending on where you live (for example under GDPR), you may also have rights to object to or restrict certain processing. Email hello@orbital-point.com and we will handle it.

09Security

Data is encrypted in transit, access to production systems is restricted, and authentication is delegated to Google — no passwords are stored by us. No system is perfectly secure, but if we learn of a breach affecting your data we will notify you promptly.

10Changes to this policy

If we change this policy in a meaningful way, we will announce it in the app or by email before the change takes effect.