Privacy Policy

Last updated: 17 June 2026

This Privacy Policy explains how Orbit processes personal data for account management, collaboration, billing, and security operations.

1. Data Controller

Cranky Alien Games S.r.l.s. acts as data controller for account and platform data. Orbit is a product of Cranky Alien Games S.r.l.s.

2. Data We Process

• Identity and account data (name, email, profile details).
• Organization and collaboration data (issues, comments, docs, forum posts, assignments).
• Billing metadata (plan, subscription state, Stripe subscription reference).
• Technical and security data (access logs, authentication events, IP/device metadata).

3. Legal Bases (GDPR)

• Contract performance for service delivery.
• Legitimate interest for security, fraud prevention, and product reliability.
• Legal obligation for accounting/compliance records.
• Consent where required (for optional communications/cookies).

4. Retention

Data is retained for as long as needed for service purposes, legal obligations, and dispute handling, then deleted or anonymized according to internal retention schedules.

5. Sharing and Processors

Orbit uses trusted processors for infrastructure, email delivery, and payments (including Stripe). Data processing agreements are in place where required.

6. International Transfers

When data is transferred outside the EEA, Orbit applies appropriate safeguards such as contractual clauses and equivalent protection measures.

7. Your Rights

You may request access, rectification, deletion, restriction, portability, or objection where applicable under GDPR.

8. Contact

For privacy requests, contact your designated legal/privacy channel (e.g. privacy@orbitstudio.gg).