Privacy Policy

1. Introduction & Scope

At Orbium Technologies Inc. (“Orbium,” “we,” “us,” or “our”), we take your privacy and the confidentiality of your clients seriously. This Privacy Policy explains how we collect, use, disclose, protect, and process personal information when you use our website (orbiumai.online), our appointment booking applications, and related software services (collectively, the “Service”).

This policy applies to both our business subscribers (“Tenants”) and the individuals who book appointments through a Tenant’s booking link (“Clients”).

2. Information We Collect

3. How We Use Personal Information

We process personal data strictly for legitimate operational purposes:

• To Provide the Scheduling Service: Calculating real-time slot availability, locking appointment times, preventing double-bookings, and generating confirmation receipts.
• Automated Reminder Dispatch: Sending transactional emails (via Resend) and SMS notifications to ensure clients remember their appointment slots and arrive on time.
• Account Administration: Managing subscriptions, verifying custom domain DNS mappings, and providing technical customer support.
• Platform Security: Preventing fraud, mitigating denial-of-service attempts, enforcing rate limits, and securing user accounts.

We never sell client data. Orbium does not sell, rent, monetize, or broker personal information or client directories to third-party advertisers or data brokers under any circumstances.

4. Third-Party Sub-Processors & Infrastructure

To deliver high-reliability service, Orbium partners with trusted, industry-leading cloud infrastructure providers who act as data sub-processors under strict data protection agreements:

5. Data Retention & Client Deletion Rights

We retain business account data and appointment histories for as long as your account remains active. If a business cancels their subscription, their account data is scheduled for permanent purge after 90 days.

End-clients who book appointments may request access, correction, or deletion of their contact information at any time by contacting the business directly or submitting a privacy request to privacy@orbiumai.online.

6. Your Rights Under GDPR & CCPA/CPRA

Depending on your location, you possess specific statutory rights regarding your personal information:

• Right to Know & Access: The right to request disclosure of what personal data we collect, use, and process.
• Right to Rectification: The right to request correction of inaccurate personal data.
• Right to Erasure (“Right to Be Forgotten”): The right to request complete deletion of your personal data from our systems.
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format.
• Non-Discrimination: We will never deny services, charge different prices, or provide a lower quality of service for exercising your privacy rights.

7. Security Measures & Encryption

We implement defense-in-depth technical and organizational security controls to protect your data:

• All network traffic is encrypted in transit using industry-standard TLS 1.3 / HTTPS.
• Database records are isolated per tenant using PostgreSQL Row Level Security (RLS) policies.
• Administrative access requires multi-factor authentication and tokenized sessions.
• Reschedule actions utilize cryptographic one-time access tokens rather than shared passwords.

8. Children’s Privacy

The Service is designed exclusively for business owners and adult consumers. We do not knowingly collect or solicit personal information from individuals under the age of 16. If we become aware that personal information from a child under 16 has been collected without parental consent, we will delete that data immediately.

9. Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer: