Privacy Policy

This draft explains the information Orbisy expects to process through its public website and private lead-management tools.

Information you provide

When you request a records-workflow review or submit another project request, Orbisy may collect your name, business name, email address, website URL, requested service, project description, timeline, budget range, and acknowledgment of this policy. The public forms are not intended for grease-interceptor tickets, manifests, photographs, or other service documents. Do not submit those records through this site.

Business lead information

The private administrator system may contain business contact information entered manually from documented public or otherwise permitted sources or imported through administrator-reviewed CSV files. Orbisy records source attribution and may retain the original imported value alongside a normalized value used for duplicate and suppression checks. Imported information may be incomplete, outdated, or inaccurate. It may also contain notes, follow-up dates, pipeline history, suppression choices, and manually recorded contact attempts.

Anonymous website analytics

Orbisy uses first-party analytics to understand page views, calls to action, form starts, successful submissions, referring domains, broad device categories, and aggregate website journeys. These events use a random session identifier and are not connected to form submissions. Orbisy does not intentionally store raw IP addresses, full user-agent strings, exact location, advertising identifiers, fingerprints, or form contents as analytics.

How information is used

• Review and respond to requests.
• Manage legitimate business conversations and follow-ups.
• Protect forms and administrator access from abuse.
• Understand and improve the public website.
• Maintain suppression records to avoid unwanted contact.

Managed-service records

If a written client agreement is later established, the parties will separately confirm the approved record-transfer method, permitted uses, retention, deletion, access, and service providers. The current public application does not provide a customer document portal or public grease-record upload feature.

Service providers

Orbisy may use providers for hosting, PostgreSQL database services, administrator authentication, spam prevention, error monitoring, and optional transactional notifications. Legal-review placeholder: final service providers, processing locations, and contractual terms must be confirmed by the owner and qualified counsel.

Retention and deletion

Raw anonymous analytics are intended to be retained for approximately 90 days. Other business records are retained only while reasonably useful for the stated purposes or required for legitimate operational, legal, security, or accounting needs. Backup deletion may be delayed until the relevant backup expires. A minimal suppression record may be retained without automatic expiration to prevent renewed contact.

Security and limitations

Orbisy uses reasonable technical and organizational safeguards, but no online service can promise absolute security. Production backup, incident-response, vendor, and retention procedures must be confirmed before expanded service delivery. Reasonable safeguards do not mean perfect security. Legal-review placeholder: final incident and security commitments require owner and qualified legal review.

Your choices

You may ask to access, correct, delete, or suppress information by contacting info@orbisy.com. Requests may require reasonable verification.

Changes

This policy may be updated as Orbisy's services and providers change. The effective date and policy version should be updated whenever material terms change.