Privacy Policy

Orbis Builders is operated by Orbis Media ApS, Denmark. Contact: mikkel@orbisx.ai

• Account information — email address and password (stored by AWS Cognito, hashed)
• API usage — request counts per key, per day (no request content is stored)
• Billing — handled entirely by Stripe. We store your Stripe customer ID but not card details

• No tracking cookies or analytics
• No IP address logging
• No search query content (we count requests, not what you searched for)
• No third-party advertising or data sharing

• Email — to authenticate you and send transactional emails (verification codes, password resets)
• Usage counts — to enforce plan quotas and show you your usage in the dashboard
• Stripe customer ID — to manage your subscription and process payments

• AWS Cognito (authentication) — EU region (eu-north-1, Stockholm)
• AWS DynamoDB (usage data) — EU region (eu-north-1)
• Stripe (payments) — see Stripe's privacy policy

All data is processed and stored within the EU.

Account data is kept for as long as your account is active. Usage records are retained for 12 months for billing reconciliation, then automatically deleted.

You have the right to:

• Access — see what data we hold (visible in your dashboard)
• Correction — update your email via the dashboard
• Deletion — email mikkel@orbisx.ai and we will delete your account and all associated data within 30 days
• Export — request a copy of your data via email
• Objection — you can close your account at any time

API keys are encrypted at rest with AWS KMS. Passwords are handled by AWS Cognito (SRP protocol, never stored in plaintext). All traffic is encrypted in transit via TLS.

We may update this policy. Significant changes will be communicated via email to registered users.

Questions about your data? Email mikkel@orbisx.ai