Privacy Policy

1. Who is responsible

The controller is Infinity Consciousness Europe SIA, Vēja iela 4 – 2, Ādaži, Ādažu novads, LV-2164, Latvia (registration no. 50203642241). Contact: hello@orbitgrow.app.

2. Website visitors

Our public website uses no advertising or third-party tracking cookies and no analytics cookies. Our hosting provider processes standard web logs (IP address, time, requested page, browser) for security and keeps them for a short period.

Anonymous usage counts: to understand which pages help people, our own server counts simple events, for example “pricing page viewed” or “website check started”. We store only the date, the event name and the page path, as a daily total. No cookies are set, and no IP address, device identifier or account is linked to these counts, so they are not personal data. No third-party analytics service is used.

Contact and call booking: when you send a message or book a call, we store your name, email address and what you entered, and use them only to answer you and hold the call. We delete them when they are no longer needed, at the latest after 24 months.

Free website check: when you enter a website address, our server loads that site's public homepage once and analyses it. We do not store the result unless you then start a trial with that site, in which case the details are saved in your browser and used to pre-fill your setup.

3. Your account

• We store your name, email address, a salted and hashed password, your sessions, and the business details you enter (company name, website, services, area, budget).
• If you invite team members, we store their email address and role.
• Hosting: database in the European Union (Supabase); application hosting by Vercel.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We keep account data until you delete your account.

4. Google Ads and Google Search Console data

When you connect Google, you grant Orbit Grow access through Google's official sign-in (OAuth). We request access to Google Ads and read-only access to Search Console.

• What we read: your Google Ads accounts, campaigns, budgets, costs, clicks, conversions, the search terms that triggered your ads, keyword search volumes, and Search Console search queries, clicks, impressions and positions for your website.
• Why: to show you your results, find wasted spend, and suggest changes. Changes to your Google Ads account (for example excluding search terms or changing budgets) are made only after you approve them.
• Storage: access tokens are stored encrypted. Synced data is stored in our database and refreshed daily. When you disconnect Google, we revoke our access and delete the synced data.
• Orbit Grow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, do not use it for advertising, and do not use it to train AI models.

5. Trial, subscription and payments

• We store your trial dates and subscription status (plan, status, billing period, scheduled cancellation).
• Payments are handled by Paddle.com, our merchant of record, as an independent controller for payment processing, invoicing and tax. We never receive or store card numbers. We store Paddle customer and subscription identifiers received through verified notifications.
• Billing records are kept as long as statutory retention periods require (in Latvia generally up to 10 years for accounting documents).

6. Emails

We send transactional emails only: welcome, password resets, team invitations and billing notices. Paddle sends receipts and invoices. No newsletters without your separate consent.

7. Cookies

We use only strictly necessary cookies: a session cookie that keeps you signed in, a cookie that remembers which business you are working on, and a short-lived security cookie during Google sign-in. When you open checkout, Paddle may set cookies necessary for payment and fraud prevention.

8. Processors and recipients

• Supabase Inc. — database (EU region).
• Vercel Inc. — application hosting.
• Google LLC — Google Ads and Search Console APIs, at your request.
• Paddle.com Market Ltd — merchant of record (independent controller for payments).
• Our email delivery provider (Brevo or Resend) — transactional emails.

9. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and to lodge a complaint with a supervisory authority (in Latvia: Datu valsts inspekcija). You can delete your account in Settings or by contacting us. See also our Terms.