Privacy Policy

This policy explains how Orbizo Connect (“we”, “us”) handles personal data in three contexts: visitors to this website, client users of our dashboards, and business prospects contacted through the outreach services we operate for clients. It applies alongside our Terms of Service.

Site visitors. If you submit an access request, we receive what you send us: your name, company, work email, website, and message. This site sets no advertising trackers.

Client users. For dashboard accounts we process your name, work email, hashed login credentials, role, and sign-in activity. Payment details are processed by our payment provider and never stored on our systems.

Prospects. To operate outreach for clients we process business contact information about professional prospects: name, role, company, business email, company details, and — once a conversation exists — its content and engagement signals (delivery, replies, unsubscribes, meetings). We deliberately limit prospect data to business-context information; we do not enrich prospects with sensitive categories of data.

• To provide the Services — operating campaigns, conversations, qualification, and delivery for clients (performance of contract with our clients; our clients’ and our legitimate interest in business-to-business marketing toward prospects).
• To protect the Services — deliverability management, suppression lists, abuse prevention, security logging (legitimate interest).
• To meet legal obligations — including honoring opt-outs and lawful requests.

Where consent is the applicable basis under local law, we rely on our clients to engage us only for audiences they may lawfully contact, and we honor every opt-out instantly and permanently regardless of basis.

Campaign drafting and reply understanding are assisted by large-language-model providers. Content sent to those providers is limited to what the task needs (for example, a prospect’s reply and relevant approved company knowledge), is transmitted under contractual confidentiality, and is not used by us to train public models. Automated suggestions that matter — campaign plans, qualification — are subject to human review; no decision producing legal or similarly significant effects on an individual is made solely by automation.

We use a small set of processors, each bound by data-processing terms: cloud database and infrastructure hosting, business email infrastructure, queue and cache infrastructure, AI model providers, email verification and enrichment providers, scheduling, and payments. We do not sell personal data, and one client’s data is never shared with another client.

Client data is isolated per tenancy and enforced in the application and at the database layer. The client dashboard runs as a separate application that can only read a deliberately limited, business-level view of your data. Mailbox credentials are encrypted at rest with versioned keys. Access to production systems is limited to authorized staff with revocable, role-scoped accounts.

Client tenancies. When an engagement ends, the tenant enters a 90-day retention window during which it can be fully restored on request. At the end of the window the tenancy is permanently deleted — conversations, leads, knowledge, documents, and mailbox credentials — through a logged, human-confirmed deletion pipeline.

What survives deletion. Suppression records (so opt-outs stay honored), aggregate non-identifying platform learnings, and legally required records. Provider-history records about a prospect are disassociated from the departed client.

Prospects. Opt-out requests are effective immediately and persist platform-wide. Prospects may also request deletion of their data (see Section 8).

Depending on your jurisdiction (including the EU/UK GDPR and UAE PDPL), you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to portability. Prospects can exercise the simplest right — stopping all contact — instantly via the unsubscribe mechanism in any message, or by writing to us. To exercise any right, contact access@orbizoconnect.com. We respond within the timelines required by applicable law, and you may also lodge a complaint with your local supervisory authority.

Our processors may store or process data outside your country. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions, and we choose providers with strong, audited security practices.

We will post updates to this policy here and date them; material changes affecting clients are notified directly. Privacy questions and requests: access@orbizoconnect.com.