Privacy Policy

1. Who We Are

This Privacy Policy explains how Orbit Apps Limited ("we", "us", "our") collects, uses, discloses, and safeguards information when you visit our website, submit inquiries, or engage our SaaS, AI, automation, cloud, and security services. Our registered office is located in Nairobi, Kenya, and you can contact our privacy officer at solutions@orbitapps.co.ke or ronohkd@gmail.com.

2. Information We Collect

We process personal and technical information in the following categories:

• Direct Information — Name, company name, email address, phone number, and project requirements submitted via forms, email, or discovery calls.
• Technical & Usage Data — IP address, browser type, device telemetry, pages viewed, and access logs collected automatically for security and performance optimization.
• Client Managed Data — Where we build or host solutions on behalf of a client (e.g. WhatsApp bots, M-Pesa automated ledgers, or multi-tenant SaaS platforms), the client remains the primary Data Controller, and Orbit Apps acts as Data Processor under a separate Data Processing Agreement (DPA).

3. How We Use Information

• Evaluate project requests and provide technical proposals or cost estimates
• Architect, engineer, deploy, and maintain custom software deliverables
• Ensure API security, monitor system health, and prevent unauthorized access
• Send project status updates, system alerts, and billing invoices
• Fulfill statutory accounting, tax, and legal obligations

4. Cookies and Analytics

We use minimal essential cookies required for site navigation and secure session management. Where analytics tools are enabled, data is anonymized to assess traffic patterns and optimize site performance. You can adjust your browser settings to reject non-essential cookies.

5. Sharing of Information

We do not sell, rent, or trade personal data. Information may only be shared with authorized third parties under strict confidentiality obligations:

• Infrastructure Providers — Enterprise cloud hosting platforms (AWS, Azure), payment gateways (Safaricom M-Pesa), and messaging networks (WhatsApp Business API) strictly necessary for service delivery.
• Legal Requirements — Regulatory authorities or law enforcement agencies when mandated by valid legal process or court order.

6. Data Security Controls

We enforce zero-trust security controls, including TLS 1.3 encryption in transit, AES-256 encryption at rest, secrets management, strict role-based access control (RBAC), and continuous threat monitoring to safeguard data integrity.

7. Data Retention

We retain personal information only for the duration necessary to satisfy project contractual goals, legal recordkeeping requirements, or dispute resolution standards, after which data is permanently purged or sanitized.

8. Your Rights

Under applicable data privacy laws, you have the right to access, rectify, request erasure, or restrict processing of your personal data held by us. To exercise these rights, contact solutions@orbitapps.co.ke or ronohkd@gmail.com.

9. Contact Us

If you have questions regarding this Privacy Policy, please email solutions@orbitapps.co.ke / ronohkd@gmail.com or call +254 729 685 328.