1. Draft Status & Architectural Transparency
This Privacy Policy is a technical draft prepared for professional legal review. It documents the actual data categories processed by the OrbitSearch application architecture.
This document does not constitute a formal certification of GDPR, CCPA, or other regional regulatory compliance until reviewed and approved by qualified legal counsel.
2. Information Collected & Processed
Account Identity Data: Name, email address, hashed password credentials, email verification timestamps, and role assignments.
Workspace & Project Data: Target domains, country/language settings, saved keyword lists, competitor domain targets, clustering configurations, and generated content briefs.
Usage & Audit Telemetry: Credit ledger transactions, background job execution logs, API usage records, IP addresses, and security audit trail entries.
3. How OrbitSearch Uses Information
To authenticate sessions, enforce role-based authorization, and protect accounts against brute-force or automated abuse.
To execute asynchronous SEO research jobs, cache SERP and keyword snapshots, generate content briefs, and produce downloadable CSV/XLSX exports.
To enforce workspace credit allowances, plan limits, and platform cost-control budgets.
4. Third-Party Service Providers
Search Intelligence Providers: Seed keywords and target domains submitted in research jobs are transmitted to upstream SEO data providers (such as DataForSEO when configured) to retrieve search metrics.
AI Content Generation: Topic cluster context and keyword prompts may be processed via configured language model APIs (such as OpenAI when enabled) to generate structured content briefs.
Payment Processing: When billing is enabled, subscription checkout and payment method management are handled by Stripe. OrbitSearch stores provider customer/subscription identifiers and invoice references, not raw payment card numbers.
Bot Protection: Login, registration, and password recovery forms may use Cloudflare Turnstile challenge tokens to prevent automated abuse.
6. Data Retention & Account Controls
Project owners can manage or delete their projects, saved keyword lists, and exports within their workspace.
Audit logs and billing ledger records are retained in accordance with operational security and accounting requirements.