Privacy Policy
Effective 8 August 2026
This policy covers orbitsoc.com and orbitsoc.ai — our public websites.
It does not cover data processed inside the OrbitSOC platform. In most deployments OrbitSOC runs inside your own infrastructure or cloud tenant and we never receive your data at all; where we do process data on your behalf, that processing is governed by your written agreement and Data Processing Addendum with us. See our Trust & Security page for how the platform actually handles data.
Who we are
OrbitSOC, Inc., a Delaware corporation.
7901 4th St N, STE 300, St. Petersburg, FL 33702, United States.
Questions about this policy: privacy@orbitsoc.com
What we collect
Information you give us. If you request a demo or contact us through the site, we collect your name, business email address, company name, your role, your company website, and whatever you write in the message field. That is the complete list — it is the entire contents of the form.
Information collected automatically. Our hosting provider records standard server logs — IP address, browser user-agent, pages requested and timestamps — for security, abuse prevention and reliability.
What we do not collect. We run no analytics and no tracking of any kind on these sites. No Google Analytics, no advertising pixels, no session-replay tools, no third-party trackers, and no cookies that follow you anywhere. We do not build profiles, we do not collect special-category data, we do not knowingly collect information from anyone under 16, and we do not buy contact data from brokers.
Why we use it
To reply to your enquiry and arrange demos. To operate, secure and troubleshoot the sites. To contact you about OrbitSOC where you have asked us to, or where we have a legitimate business interest in professional business-to-business communication — and you can opt out of any such message at any time.
Where the GDPR applies, our legal bases are: steps taken at your request before entering into a contract; our legitimate interests in operating and securing our sites and in business-to-business communication; and consent where consent is required.
Who we share it with
Only the service providers listed on our Subprocessors page, who act on our instructions and may not use your data for their own purposes.
We may disclose information if we are legally required to, or in connection with a merger, acquisition or sale of assets. We do not sell your personal information and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We have never done either.
Where it goes
We are based in the United States and process this data there. For transfers of personal data out of the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, or another lawful transfer mechanism.
How long we keep it
| Data | Retention |
|---|---|
| Demo requests and enquiries | 24 months from your last contact with us, unless you ask us to delete sooner or we are in an active commercial relationship |
| Server logs | 30 days, then deleted or aggregated beyond identification |
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a portable copy of your personal information; to object to or restrict processing; to opt out of marketing; and to withdraw consent. California residents have the rights to know, delete, correct, and to opt out of sale or sharing — we do neither. We will not discriminate against you for exercising any of these rights.
Email privacy@orbitsoc.com and we will respond within the time the applicable law requires. Residents of the EEA and UK may also complain to their local supervisory authority.
Security
We maintain administrative, technical and organisational measures appropriate to the risk, described on our Trust & Security page. No system is perfectly secure and we will not claim otherwise.
Changes
We will post any new version here and update the effective date. Material changes will get prominent notice.