Privacy Policy

1. Information we collect

1.1 Information you provide directly. Identity and contact details — your name and email address (and, optionally, organisation). Account content — the teams, projects, boards, tasks, labels, and comments you create in your workspaces. Communications — when you email us, the content of your message and any attachments.

1.2 Payment information (when billing is enabled). Billing name and payment instrument details are collected and processed by our payment gateway partner (Razorpay, with Instamojo as an alternative). We do not store your full card number, CVV, or UPI PIN — we only receive a Transaction reference ID and status. Online payment is not yet enabled.

1.3 Information collected automatically. Log data — your IP address, browser type and version, operating system, referring URL, pages visited, and timestamps, collected for security and traffic-analysis purposes. Cookies and similar technologies that are strictly necessary for authentication and session management.

2. How we use your information

We use the information we collect to:

• Provide, operate, and secure the Orbit service for you and your team.
• Authenticate your account and maintain your session.
• Process subscription payments and send receipts (when billing is enabled).
• Respond to your queries, requests, refund applications, and grievances.
• Improve the product and the user experience.
• Comply with legal, tax, and regulatory obligations (e.g., GST invoicing in India).
• Detect and prevent fraud, abuse, or unauthorised access.

We do not sell your personal information to third parties.

3. Who we share your information with

• Infrastructure. Orbit runs on a self-hosted Supabase stack (PostgreSQL database, authentication, and file storage) on our own virtual private server. Your account data is stored there; it is not handed to a third-party database SaaS.
• Email. Transactional emails (such as team invites and account notices) are sent via Resend, our email delivery provider.
• Payment gateway. Razorpay (primary), with Instamojo as an alternative, to process payments once billing is enabled.
• Tax and legal authorities. When required by Indian law, including for GST and income-tax purposes.
• Business transfer. If Enkamind is ever sold or merged, your information may be transferred to the new owner, subject to the same privacy commitments.

4. Data retention

We retain your personal information for as long as necessary to provide the Service and to meet legal obligations. Account and content data are retained while your account is active and deleted on request, subject to legal retention requirements. Payment and tax records are retained for at least 8 years from the Transaction, as required by Indian tax law. Email correspondence is retained for up to 3 years from last contact unless you request earlier deletion.

5. Cookies

We use strictly necessary cookies required for authentication and for the Service to function — these cannot be disabled without breaking sign-in. We do not use advertising cookies within the Orbit app. You can control cookies through your browser settings, but blocking essential cookies will prevent you from signing in.

6. Security

We take reasonable technical and organisational measures to protect your personal information, including HTTPS encryption for all data in transit, row-level security isolating each team's data in the database, and restricted, authenticated access to systems. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your rights

Under applicable Indian law, including the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Erasure — request deletion of your personal information, subject to legal retention obligations.
• Withdraw consent — withdraw consent for non-essential processing at any time.
• Grievance — register a complaint with our Grievance Officer.

To exercise any of these rights, email support@enkamind.com.

8. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, our designated Grievance Officer is Senthamizh Selvi Mohanam, Enkamind, 42 Thiruvalluvar Nagar, Mogappair, Chennai, Tamil Nadu 600037. Email support@enkamind.com. We acknowledge grievances within 48 hours and aim to resolve them within 15 working days.

9. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “last updated” date. Your continued use of Orbit after changes take effect constitutes acceptance of the revised Policy.