Privacy Policy

1. Introduction

POLAND-BUSINESS SP. Z O.O. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our Orbit platform.

2. Information We Collect

Account Information

• Email address (required for account creation)
• Name (optional, for personalization)
• Payment information (processed securely via our payment provider)

Usage Information

• Session duration and credit usage statistics
• Technical logs for service improvement and debugging
• IP address and device information for security purposes

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our cloud computing services
• Process payments and manage your account balance
• Send service-related communications and updates
• Ensure security, prevent fraud, and detect abuse

4. Data Storage and Security

All traffic is encrypted in transit (HTTPS). At rest, we additionally encrypt stored credentials and device passwords (AES-256-GCM); other account data is held in our managed database with the protection that provider applies. We retain account data only as long as necessary to provide our services or as required by law.

Storage on a remote workstation is kept for your rental: it is not erased when you stop the workstation, and it is wiped when the rental ends - see Terms §6. Copy off anything you want to keep before then.

5. Your Rights (GDPR)

You have the right to:

• Access your personal data and receive a copy
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten"), subject to the records we are required to keep - see below
• Export your data in a portable format (JSON/CSV)
• Opt out of marketing communications at any time

What deletion actually removes. Closing your account from Settings → Security deletes your sessions and sign-in methods, your workstations, devices and scripts, your notifications, your conversations with the AI assistant, your usage logs and your saved preferences, and removes your name, your email address and your password from your account record. It happens immediately; there is no grace period and it cannot be undone.

What we keep, and why. Your orders, invoices and any marketplace task records - including task messages, executor earnings and withdrawals - are kept, because we are legally required to retain accounting and tax records and cannot erase them on request. They stay linked to your account record with your name and email removed from it, and we hold them for as long as applicable accounting and tax law requires. Any remaining credit balance is set to zero on closure and is not refunded; request a refund for eligible unused credits before you close the account - see our Refund Policy.

6. Cookies

We use essential cookies for authentication and session management. Analytics cookies help us understand usage patterns. See our Cookie Policy for more details.

7. Third-Party Services

We use trusted third-party services for payment processing and analytics. These services have their own privacy policies and handle data according to their terms. We do not sell your personal information to third parties.

We also use Telegram (Telegram FZ-LLC) as the channel our team reads operational alerts and incoming correspondence on. What reaches it:

• Messages you send us yourself - the contact form on /support and email to our company mailbox - including your name, your email address and what you wrote.
• Service alerts for signup, sign-in, payment attempts and workstation provisioning. These carry your account id, your name and email address, the country and IP address the request came from, and what was charged - our team answers these people, and an internal id is not something anyone can reply to. Card numbers, CVVs, passwords and session tokens are never sent.

8. International Transfers

Your data may be processed in countries outside the EEA. We ensure appropriate safeguards are in place through Standard Contractual Clauses and compliance with applicable data protection frameworks.

9. Changes to This Policy

We may update this policy periodically. Significant changes are posted here and announced in your dashboard at least 30 days before taking effect; we do not currently send policy email, so that notice is where to look. The "Last updated" date at the top indicates when changes were made.

10. Age Restrictions and Eligibility

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal data from a person under 18 without parental consent, we will take steps to delete that information promptly.

This policy applies to everyone whose personal data we process, wherever they live. We are established in Poland and apply the standard described here to all users, including those in countries whose own data protection laws grant fewer or different rights than the EU GDPR. Section 8 explains the transfers involved.

11. Legal Disclaimers

While we implement reasonable security measures to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

This Privacy Policy is governed by the laws of Poland and the General Data Protection Regulation (GDPR).

12. Contact Us

For privacy-related inquiries, write to privacy@orbit.equipment.