Privacy Policy

Last updated September 17, 2026

This Privacy Policy explains what information OrbitLabX collects, how we use it, and the choices you have. By using OrbitLabX, you agree to the practices described here.

1. Information We Collect

We collect information in three ways: what you give us directly, what we generate from your use of the platform, and what we receive from third parties you connect to your account.

Account information. When you create an account, we collect your name, email address, username, and password (stored in hashed form). If you sign up via a third-party provider (such as Google), we receive the basic profile information that provider shares with us.

Profile information. Bio, avatar, nationality, residency location, travel history, and other details you choose to add to your profile.

Usage information. Locations you view or save, searches and filters you run, community posts and comments you create, support requests you submit, and your interactions with Vaino AI, our AI assistant.

Billing information. If you subscribe to a paid plan, payments are processed by Stripe. We do not store your full card number - Stripe shares with us only what is needed to manage your subscription (plan tier, billing status, and similar metadata).

Device and log information. IP address, browser type, device identifiers, and general usage logs, collected automatically for security and reliability purposes.

2. How We Use Your Information

We use the information above to:

  • Provide, operate, and maintain the OrbitLabX platform
  • Personalize location recommendations, search results, and AI responses
  • Process subscription payments and manage your billing history
  • Facilitate community features such as posts, comments, groups, and events
  • Coordinate on-the-ground support requests through our Authority Network
  • Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service
  • Communicate with you about your account, transactions, and product updates
  • Improve and develop new features based on aggregated, de-identified usage patterns

3. Vaino AI and Artificial Intelligence Features

When you ask Vaino AI a question, your query and relevant context (such as your search history or saved locations, where applicable) are processed to generate a response. Some of this processing may occur through third-party AI infrastructure providers acting on our behalf under contractual confidentiality and data-protection obligations. We do not use your individual conversations to train models made available to other users.

Vaino AI's responses are generated automatically and are provided for informational purposes only - see our Terms of Service for details.

4. Cookies and Similar Technologies

We use browser local storage to keep you signed in and to remember basic preferences such as your light/dark theme. With your consent, we also use Google Analytics to understand how the platform is used; until you accept, it stores nothing on your device. We do not use advertising cookies and we do not share your data with advertising networks. You can change your choice at any time via “Cookie Preferences” in the footer. For full details, see our Cookie Policy.

5. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

  • Service providers who help us operate the platform - including our database and authentication provider (Supabase), payment processor (Stripe), and hosting infrastructure - under agreements that limit their use of your data to providing services to us.
  • Other users, limited to what you choose to make public on your profile or in community posts, comments, and groups.
  • Authority Network partners, when you submit an on-the-ground support request, so they can assist you - limited to what is necessary to fulfil that request.
  • Legal and safety purposes, where required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of OrbitLabX, our users, or the public.

6. Data Retention

We retain your information for as long as your account is active, or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where retention is required by law or legitimate business purposes (such as billing records).

7. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can update most of your information directly from your account settings, or contact us using the details below to exercise these rights.

8. Data Security

We use industry-standard safeguards - including encryption in transit, access controls, and secure infrastructure providers - to protect your information. No system is completely secure, and we encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

9. Children's Privacy

OrbitLabX is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. International Data Transfers

OrbitLabX serves a global community, and your information may be stored and processed in countries other than your own. Where required, we rely on appropriate safeguards to ensure your information receives an adequate level of protection wherever it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the platform or by email before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at support@orbitlabx.com.