Privacy PolicyUpdated May 7, 2026
Orbitly Inc. ("Orbitly", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and your rights in relation to that data when you use orbitlyapp.com and the Orbitly mobile application (collectively, the "Service"). By using the Service you agree to the collection and use of information in accordance with this policy.
What Data We CollectAccount data: When you register, we collect your name, email address, and a hashed version of your password. SDK partners may also transmit a unique partner-assigned user identifier.Device data: To operate the bandwidth-sharing service we collect your device type, operating system version, and connection type (mobile data or Wi-Fi). We do not collect your precise GPS location — we infer country-level geography from your IP address solely to calculate applicable payout rates.Usage data: We record the volume of bandwidth shared (in GB), session start and end timestamps, connection quality metrics, and in-app feature interactions. This data is used to calculate earnings and improve the Service.Payment data: To process payouts we collect your PayPal email address or bank account details as provided by you. Orbitly does not store full payment card numbers.Communications: If you contact our support team, we retain records of that correspondence to resolve your request and improve our services.
How We Use Your DataService delivery: To provide, operate, and maintain the Service — including routing bandwidth through your device, calculating earnings, and processing payouts.UX improvement: We analyse aggregated usage patterns, feature interactions, and performance metrics to identify friction points and improve the product experience. This includes A/B testing of app features and onboarding flows.Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, abuse, and technical attacks that could harm users or the integrity of the network.Communications: To send you account-related notifications (payout confirmations, security alerts, material changes to this policy or our Terms) and, where you have opted in, promotional messages about new features or programmes.Legal compliance: To comply with applicable laws, respond to lawful requests from public authorities, and enforce our Terms and Conditions.
Third-Party Services and Data SharingPayment processors: PayPal and supported bank transfer providers receive only the payment details you provide and the payout amount. These providers operate under their own privacy policies.Analytics: We use PostHog for product analytics. PostHog processes aggregated, pseudonymised usage data on our behalf and is contractually prohibited from using your data for its own purposes.Infrastructure: The Service runs on Amazon Web Services (AWS). Your data is stored in encrypted form on AWS servers located in the United States.SDK partners: Third-party app developers who integrate the Orbitly SDK receive bandwidth routing capabilities and aggregate performance statistics. They do not receive your name, email, or payment information.Business transfers: If Orbitly is involved in a merger, acquisition, or asset sale, your personal data may be transferred as a business asset. We will notify you before your data is transferred and becomes subject to a different privacy policy.Legal requirements: We may disclose your data if required to do so by law or in response to a valid court order, subpoena, or government request.
Your RightsAccess and portability: You may request a copy of the personal data Orbitly holds about you at any time by contacting privacy@orbitlyapp.com.Correction: If any data we hold about you is inaccurate or incomplete, you may request that we correct it.Deletion: You may request deletion of your account and associated personal data. Note that we may retain certain data for a limited period to comply with legal obligations or resolve disputes.Opt-out: You can stop sharing bandwidth at any time through the app settings. You may also unsubscribe from marketing communications via the link in any marketing email.GDPR and CCPA: If you are located in the European Economic Area, United Kingdom, or California, you may have additional rights under applicable data protection law — including the right to object to processing, restrict processing, or lodge a complaint with a supervisory authority. Contact privacy@orbitlyapp.com to exercise any of these rights.
Data RetentionWe retain your personal data for as long as your account is active or as needed to provide the Service. Upon account deletion, your personal data is removed from our systems within 90 days, except where retention is required by law (e.g., financial records for up to 7 years) or to resolve open disputes or enforce our agreements.
SecurityWe implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS) and at rest, access controls, and regular security reviews.No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact support@orbitlyapp.com immediately.
Children's PrivacyThe Service is not directed to children under 18. We do not knowingly collect personal data from anyone under 18 years of age. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete it promptly.
Changes to This PolicyWe may update this Privacy Policy from time to time. Material changes will be communicated by posting the revised policy on this page and, where appropriate, by notifying you through the app or via email. The "Updated" date at the top reflects the most recent revision. Your continued use of the Service after any change constitutes your acceptance of the revised policy.
Contact UsFor privacy-related questions or to exercise your rights, please contact us at privacy@orbitlyapp.com. Orbitly Inc., United States.