Privacy Policy

How OrbiFabric handles information across our website, Cloud services, local tools, and self-hosted products.

Last Updated: August 10, 2026

1. Scope

This Privacy Policy explains how OrbiFabric handles personal information in connection with orbifabric.com, OrbiFabric Cloud, OrbiSeal, OrbiVerify, APIs, Cloud Anchor, and related OrbiFabric services. It also describes the boundary between OrbiFabric-operated services and future customer-controlled self-hosted Platform or Enterprise deployments.

2. Our privacy principles

OrbiFabric follows data minimization by design: we aim to collect and use only the information reasonably needed to provide product capabilities, accounts, security, support, billing when enabled, and legal obligations.

We do not sell personal information. We do not build advertising profiles from user business files, and collecting or reading delivered files is not our business model.

3. Information you provide

Depending on the service you use, you may provide information such as an email address, display name, organization or contact details, account preferences, demo request details, and support correspondence. Billing information may be processed if paid services are enabled in the future.

Please do not send sensitive business files or unnecessary personal information to us through a demo request or support channel unless we ask for it and you choose to provide it.

4. Google Sign-In and Google user data

When Google Sign-In is available, OrbiFabric requests only the minimum OpenID identity, email, and basic profile information needed to authenticate you, create or maintain your OrbiFabric account, show necessary account information, protect the service, and provide features you request. This may include a Google account identifier, email address, display name, and profile picture if supplied by Google.

Signing in with Google does not give OrbiFabric access to your Gmail, Google Drive, Google Calendar, Google Contacts, Google Docs, or other Google services, unless a future feature explicitly requests that access and you separately authorize it.

We do not sell Google user data; use it for advertising, retargeting, or personalized advertising; transfer it to data brokers; use it to determine creditworthiness; or use it to train general-purpose AI or machine-learning models. We share it only on a minimum-necessary basis with service providers acting for us to provide authentication, hosting, security, email, payment processing, or legal compliance.

5. Local tools and file privacy

OrbiSeal is designed as a local-first tool for creating Trusted Delivery Packages. File content, hash calculations, manifests, and integrity information are principally processed and generated on the user’s device. Creating a package does not by itself require uploading the files to OrbiFabric Cloud.

OrbiVerify is designed to verify a package locally. Basic hash, signature, manifest, Merkle, and integrity checks can be performed without sending file content to OrbiFabric Cloud. These descriptions distinguish file content from optional verification or anchor metadata.

6. Cloud Anchor and Cloud boundaries

When you use Cloud Anchor, OrbiFabric Cloud may process cryptographic digests or hashes, anchor identifiers, timestamps, signatures or verification metadata, account identifiers, device or request metadata, package-related technical identifiers, and security or audit records. The exact fields depend on the feature in use.

Cloud Anchor is intended to preserve verifiable cryptographic and evidence metadata, not to operate as centralized cloud storage for your delivery files. OrbiFabric Cloud is a control and coordination layer for authentication, accounts, entitlements, verification, lightweight coordination, release delivery, security, and related services—not a conventional file-storage SaaS for all customer business files.

7. Self-hosted Platform and Enterprise deployments

Future Platform and Enterprise products may be independently deployed in a customer-controlled environment. In those deployments, the customer controls its infrastructure, databases, object storage, business files, users, permissions, and data governance. OrbiFabric does not have a default, continuing right to access customer business content.

We may access necessary information only when a customer requests technical support, provides diagnostic materials, authorizes remote assistance, or an applicable enterprise agreement says otherwise.

8. Authentication and security data

To authenticate users, protect accounts, prevent abuse, investigate security events, and support auditability, we may process login times, IP addresses, user-agent and device information, session identifiers, authentication provider, failed-login events, API security metadata, MFA information when enabled, and device-session or audit records.

9. Website data, cookies, and local storage

The current website uses local storage for language and theme preferences. It does not currently include Google Analytics, advertising pixels, marketing cookies, or other advertising tracking tools. The visible contact form is a static placeholder and does not currently submit information.

If an OrbiFabric service uses necessary cookies or local storage, they may support authentication sessions, security or CSRF protections, language, theme, and similar essential functions. If we later add analytics, we will update this Policy and any relevant product notice.

10. How we use information

We use information to provide and operate services; authenticate users; create and maintain accounts; provide Cloud Anchor, device-session, license, entitlement, quota, billing, and email-notification functions when applicable; answer support requests; protect against fraud and abuse; maintain security and audit records; improve reliability; and meet legal obligations.

Where product improvement uses telemetry, we aim to use aggregated, de-identified, and minimum-necessary information. We do not use user business-file content to train general-purpose AI models.

12. Data retention

We retain information for periods that fit its purpose: account information while an account is active; security and audit logs for security and audit needs; support correspondence to resolve issues and keep reasonable records; billing records for applicable accounting and legal requirements; and Cloud Anchor or cryptographic evidence according to integrity and evidence-design needs.

Closing an account does not necessarily cause immediate deletion of every record. Some security, fraud-prevention, legal, transaction, audit, or cryptographic-integrity records may be retained for a reasonable period or, where their evidentiary design requires it, preserved in a form not readily altered.

13. Your choices and rights

You may update account information where the service provides that option. You may also request access, correction, deletion, account closure, or other privacy assistance by contacting us. Regional law may provide additional rights, and we will handle requests in accordance with applicable law and the information we need to verify the request.

OrbiFabric
Email: contact@orbifabric.com
Website: https://orbifabric.com

14. Security

We use reasonable safeguards appropriate to the service, including encryption, access controls, credential protection, audit logging, least-privilege practices, secure authentication, and infrastructure security measures. No system can guarantee absolute security, so please protect your account credentials and notify us promptly of suspected unauthorized access.

15. Children

OrbiFabric is directed to professionals, teams, organizations, and enterprises, not children under 13. Where local law sets a higher minimum age, we will handle information as required by that law.

16. International data processing

Internet-based services and their service providers may process information in more than one country or region. We will update this Policy if we introduce material region-specific processing choices or notices.

17. Future identity services

OrbiFabric may support additional identity providers, enterprise SSO, OIDC, SAML, or JIT provisioning in the future. Depending on a customer’s configuration, those features may process identity claims such as name, email, organization, tenant or domain, role, or group information. We will reflect material new categories of information in this Policy or an applicable product notice when those features are introduced.

18. Changes to this Privacy Policy

We may update this Policy when products, Cloud features, identity services, billing, self-hosted offerings, legal requirements, or our data practices materially change. We will post the updated version here and revise the Last Updated date; where appropriate, we will provide additional notice.

19. Contact us

For privacy questions or requests, contact OrbiFabric.