Privacy Policy

When an Agency uses the Orbiis operational application, account and authorised staff information may include names, business contact details, account identifiers, access roles, sign-in or session records, and settings required to administer the service.

Depending on the modules used, an Agency may enter or manage customer and traveller names, contact details, enquiries, itinerary or travel-service details, quotations, bookings, invoices, payment-status information, documents, internal notes, and communication history. Those records are provided or managed by the Agency for its business purposes.

Data types depend on the Agency's use of the platform. This policy does not mean every described module, field, or external integration is available to every account.

Where an Agency has activated a supported communications integration, Orbiis may process information needed to connect the Agency's channel and display or manage authorised business conversations. Relevant providers may include WhatsApp, Facebook Messenger, and Instagram when supported and enabled.

Depending on the connected channel and the permissions granted, this information may include business account or Page identifiers, sender and recipient identifiers, message text, delivery or status events, timestamps, media or attachments, and connection metadata. Orbiis processes only the information made available through the applicable integration and authorised workflow.

Communication channels are managed through the platform's communications integrations where implemented. The presence of these disclosures does not mean every Meta channel is already generally available or that Orbiis has access to a person's entire Meta account.

We use personal information to respond to enquiries, provide requested information, arrange calls or audits, understand business needs, deliver services, improve the website, maintain security, and communicate about relevant Orbiis activity.

We may also use information to operate, maintain, analyse, and improve our website, forms, workflows, and business communications.

We do not use personal information in a way that is incompatible with the purpose for which it was collected unless permitted or required by applicable law.

Where enabled for an authorised account, AI-assisted features may process information submitted for a particular request or made accessible within an approved workflow to generate drafting, summaries, recommendations, or other assistance.

The information involved, connected tools, permissions, and human review requirements depend on the feature and Agency configuration. Availability of an AI feature does not mean Orbiis automatically sends customer messages, makes business commitments, or acts without the applicable authorisation.

Where an AI-enabled feature relies on an external service provider, the information needed for that feature may be handled by that provider under the relevant service arrangements and applicable privacy terms.

Where required by applicable law, we process personal information on one or more lawful bases, which may include your consent, steps taken at your request before entering into a contract, performance of a contract, compliance with legal obligations, or our legitimate interests in operating and improving the business.

The specific basis may depend on the context in which the information is collected and how it is used.

Agencies decide what customer and traveller information they enter into their own business operations, which staff may access it, and which communications they are authorised to send. Agencies are responsible for providing appropriate notices and obtaining permissions where applicable law or a third-party platform requires them.

Orbiis operates the platform and handles information on behalf of Agencies where that is the nature of the service, while also handling certain website, account, security, and business information for its own service operations. Formal controller, processor, or equivalent roles depend on the actual relationship, applicable law, and relevant agreement.

If your request concerns information held by an Agency as part of its customer relationship, we may need to coordinate with that Agency before taking action.

We may share information with service providers who support website hosting, communications, scheduling, analytics, forms, customer operations, or other business functions carried out on our behalf.

We may also disclose information when required by law, regulation, court order, or lawful request, or where necessary to protect our rights, users, systems, or operations.

We do not sell personal information to advertisers.

Orbiis may use providers for hosting, storage, account security, analytics, business communications, and other services necessary to support the website or application. Where authorised by an Agency and technically available, connected providers may include Meta and other communication or service platforms.

The provider involved and information shared depend on the feature used. Independent third parties may process information under their own terms and privacy policies. We do not claim that all prospective integrations or providers are active for every Agency.

Because Orbiis may use service providers and infrastructure that operate across different jurisdictions, personal information may be processed outside the country where it was originally collected.

Where required, we take reasonable steps to ensure that cross-border handling of personal information is managed in accordance with applicable data-protection requirements.

Orbiis uses account permissions and Agency-scoped access controls designed to limit business records and connected communication identities to authorised users in the relevant Agency.

Access may be subject to authentication, role restrictions, operational logging, and technical controls appropriate to the service. Security controls reduce risk but no system can guarantee absolute protection.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to respond to enquiries, provide services, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods may vary depending on the type of information, the reason it was collected, and any legal or operational requirements that apply.

You may ask Orbiis to review, correct, or delete personal data handled through the website or application by emailing hello@orbiis.io. Our User Data Deletion Instructions page explains what to include and how requests are assessed.

We may verify your identity or authority, coordinate with an Agency responsible for the record, and retain or restrict information where a legal obligation or other applicable requirement prevents immediate deletion. No automatic deletion feature or universal response deadline is promised here.

Orbiis cannot directly delete data retained independently by Meta or other third-party services. Those providers may have their own deletion procedures.

Depending on your location and the laws that apply to your information, you may have rights to request access to, correction of, deletion of, restriction of, or objection to certain processing of your personal information, and in some cases to withdraw consent or request data portability.

To make a privacy-related request, contact us at hello@orbiis.io. We may need to verify your identity before acting on certain requests.

Orbiis may use cookies or similar technologies to support website functionality, remember preferences, understand website usage, and improve performance where such tools are enabled.

More detail about the types of cookies used and the choices available to visitors is provided in our Cookie Policy.

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security of information.

The Orbiis website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third parties.

We encourage visitors to review the privacy notices of any external websites they visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or website operations.

When we update the policy, we will revise the effective date shown on this page.

For privacy questions, requests, or concerns, contact Orbiis at hello@orbiis.io.

Orbiis operates from Dubai, United Arab Emirates.