Privacy Policy

Introduction

Orbweva (ABN 62 159 782 318) is an Australian sole-trader business based in Adelaide, South Australia ("we," "our," or "us"). We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). This policy explains what personal information we collect, why, how we use and share it, how long we keep it, and your rights, when you visit our website or use our services.

Information We Collect

Information You Provide

We collect information you voluntarily provide, including:

Booking details when you schedule a call (handled via Calendly)
Waitlist details: your email and any note you include
Account details if you use Orbweva Labs (name, email, and a password stored in hashed form)
Payment details if you subscribe (billing name and email; card data is handled by Stripe and we never see full card numbers)
Anything you send us by email or in the Orbi chat assistant

Information Collected Automatically

When you visit our website, we may automatically collect:

Device information (browser type, operating system)
Usage data (pages visited, time spent, referring URL)
IP address and general location data

How We Use Your Information

We use your information to:

Respond to your inquiries and provide customer support
Deliver our services and fulfil our contractual obligations
Generate replies in the Orbi chat assistant — messages are processed by OpenAI's GPT-4o model via the Vercel AI Gateway. We do not use your data to train our own AI models
Measure and improve website performance using analytics
Send updates or marketing to people who have signed up for them
Comply with legal obligations

Information Sharing

We do not sell your personal information. Some providers below are located overseas (including the United States and the European Union); when we disclose personal information overseas we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, and we remain accountable for it. We may share your information with:

Service providers who operate the service on our behalf: Vercel (hosting, analytics, AI gateway), Supabase (accounts and data), Stripe (payments), Brevo (email), Google (analytics), Calendly (booking), OpenAI (chat assistant), n8n (automation), and Cloudflare (security and delivery)
Professional advisors (lawyers, accountants) when necessary
Authorities when required by law

Data Security

We take reasonable steps to protect your personal information: encryption in transit (TLS), encryption at rest and access controls provided by our database platform, payment card data handled entirely by Stripe, and access limited to the people who operate the service. No system is perfectly secure, so while we take reasonable steps we cannot guarantee absolute security.

Your Rights

You can exercise the following rights by emailing privacy@orbweva.com. If you have a complaint we cannot resolve, you can contact the Office of the Australian Information Commissioner (oaic.gov.au). Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Data portability
Withdraw consent at any time

Cookies

We use essential cookies so the website functions (including sign-in and your language preference) and analytics cookies from Google Analytics 4 and Vercel Analytics to understand how the site is used. Analytics currently load by default; you can opt out using your browser settings. See our Cookie Policy for details.

Third-Party Services

Our website integrates with third-party services including:

Calendly for appointment scheduling
Google Analytics 4 and Vercel Analytics for website analytics
Stripe for payment processing
Cloudflare for security and content delivery

These services have their own privacy policies governing their use of your data.

Data Retention

We keep your personal information only as long as we need it for the purpose we collected it, or as the law requires — for example, payment and invoicing records are kept for about 7 years to meet Australian Taxation Office requirements. You can ask us to delete your information at any time (see Your Rights).

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions or a privacy request, please contact us at:

Privacy requests: privacy@orbweva.com
Email: hello@orbweva.com

Orbweva · ABN 62 159 782 318 · Adelaide, South Australia