Privacy.

Scope.

This policy explains how Orbitra Inc. (“Orbitra”, “we”) handles personal information through orbitrasecurity.com and related business conversations. Use of the Orbitra product is governed by the customer’s agreement and data-processing terms. Effective November 8, 2026.

Information and purposes.

If you arrange a meeting or contact Orbitra, the conversation can involve your name, business contact details, company, and the information you choose to provide. We use it to respond to your inquiry, arrange a discussion, and understand the proposed engagement.

The guided website demo uses fictional examples and does not collect a free-text conversation or connect your tenant. The website has no contact or job-application form.

Optional analytics.

Analytics stays off unless you accept it. On your first visit we ask whether you accept optional Google Analytics; accepting and rejecting are equally easy, and the demo and booking work either way. Your choice is stored in your browser for 180 days, and you can change it at any time with Privacy settings at the bottom of every page.

If you accept, Google Tag Manager loads Google Analytics 4. It records the pages you view, the demo perspective, scenarios and steps you choose, and which booking and explore links you use, together with device, browser and approximate location that Google derives from your connection. When a link includes campaign tags (utm_source, utm_medium, utm_campaign or utm_content), they are recorded with the page so we can tell which campaign or printed link brought a visit. We do not send names, email addresses, demo text, any other part of the page address or the referring page, and advertising storage and personalization are turned off. Google Analytics sets first-party cookies (_ga and _ga_*), which are removed if you later reject. Google Analytics keeps event-level data for 14 months. We also export the raw analytics events to Google BigQuery in Toronto, Canada, where they are kept for 26 months and then deleted. Reports show aggregated results.

We do not use visitor-identification services.

Service providers.

Google hosts the website (Firebase Hosting, with application servers in Toronto, Canada) and, if you accept analytics, provides Google Analytics and the BigQuery storage for exported analytics events. Our application servers record technical request details such as IP address, browser, requested address and time for security and operations, and keep them for 30 days; Google also processes request data for its hosting network as our service provider. Google may process information outside Canada, including in the United States.

Calendly handles scheduling on its own page when you follow a booking link, under its own privacy policy. Other external links, such as LinkedIn and event organizers, have their own privacy practices.

Marketing-site infrastructure and customer-platform processing are separate. Read the data-use overview for the difference.

Retention and privacy requests.

We keep information from business conversations for as long as it is needed for the conversation and any resulting relationship, and delete it on request unless the law requires us to keep it.

You can ask to access or correct the personal information we hold about you, or withdraw consent, by emailing privacy@orbitrasecurity.com. We respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

When raising a privacy concern, avoid including credentials or unrelated customer information.