Privacy Policy
Last updated: June 2026
1. Who We Are
This platform is operated by OrbisAI Labs Ltd (“OrbisAI”, “we”, “us”). OrbisAI provides an intelligence platform for multi-location businesses. For the personal data described in this policy, OrbisAI acts as the data controller. Where we process customer data on behalf of a business customer, we act as a data processor and handle that data in line with our agreement with that customer.
2. Information We Collect
We collect information you provide when creating an account or contacting us, including your name, email address, and organisation details. We collect limited business-contact information about franchise partners and store contacts that our customers manage within the platform (such as name, email, and phone number). We also collect usage data such as pages visited, features used, and interaction patterns to operate and improve the platform.
3. How We Use Your Information and Legal Basis
We use your information to provide and improve the OrbisAI platform, to communicate with you about your account, and to deliver the intelligence and analytics services you have requested. Where the UK GDPR or EU GDPR applies, we rely on the following legal bases: performance of a contract (to provide the service), our legitimate interests (to operate, secure, and improve the platform), consent (where required, for example certain communications), and compliance with legal obligations. We do not sell your personal data to third parties.
4. Data Storage and Security
Your data is stored on secure, encrypted infrastructure. We apply industry-standard security measures including encryption in transit (TLS) and at rest, role-based access controls, network isolation, audit logging of sensitive operations, and regular security reviews to protect your information.
5. International Data Transfers
Our infrastructure and certain service providers may process data outside the country in which you are located. Where personal data is transferred internationally, we put in place appropriate safeguards as required by applicable data protection law, such as Standard Contractual Clauses, and we ensure providers offer an adequate level of protection.
6. Data Retention
We retain personal data only for as long as necessary to provide the service, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. When data is no longer required, we delete or anonymise it. Customers may request deletion of their data as described below.
7. Third-Party Services
We use select third-party sub-processors to operate our platform, including cloud hosting, database hosting, authentication, and AI model providers. These providers process data only as necessary to deliver their functionality, are bound by contractual data protection obligations, and operate under their own privacy policies.
8. Your Rights
Depending on your location, you may have the right to access, correct, update, or delete your personal data; to restrict or object to certain processing; to withdraw consent; and to request a copy of your data in a portable format. To exercise any of these rights, contact us using the details below. We will respond within the timeframes required by applicable law.
9. Cookies
We use essential cookies to operate the platform, including for authentication and session management. We may use limited analytics to understand and improve usage. You can control non-essential cookies through your browser settings.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and where appropriate we will provide additional notice.
11. Contact and Complaints
For privacy-related enquiries or to exercise your rights, contact us at info@orbisai-labs.com. If you are in the UK or EU and believe we have not addressed your concern, you have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office).