Privacy Policy

Who we are

Orbit ("Orbit", "we", "us") is an all-in-one business platform for roofing contractors, operated by DayTay Inc and available at crm-orbit.com. This policy explains what information we collect, how we use and protect it, and the choices you have. Questions? Email [email protected].

Information we collect

• Account information — your name, email address, company details, and login credentials (passwords are stored only as salted hashes).
• Business data you enter — customers, jobs, appointments, measurements, proposals, invoices, photos, documents, and similar records your team creates while using Orbit. This data belongs to you.
• Payment information — subscription and customer payments are processed by Stripe. Card numbers are entered directly into Stripe's secure forms and never touch our servers; we store only non-sensitive references (such as card brand and last four digits).
• Connected services — if you connect third-party accounts (such as Google Calendar or QuickBooks Online), we store the access tokens needed to provide the integration, encrypted at rest.
• Usage and log data — standard technical logs (IP address, browser type, pages requested) used for security and reliability, plus aggregate analytics on our public marketing pages (see Cookies & analytics).

Google user data

If you choose to connect your Google Calendar, Orbit requests the calendar.events scope so it can view and edit events on your calendar. We use this access for exactly one purpose: keeping your Orbit calendar and your Google Calendar in sync, in both directions. Specifically, we:

• read events from your calendar so your true availability shows inside Orbit and on your booking pages;
• create, update, and delete Google Calendar events that correspond to appointments and events managed in Orbit;
• store a synchronized copy of event details (title, time, location, notes) in your company's Orbit database while your account is connected.

We do not sell Google user data, do not use it for advertising, and do not use or transfer it to train artificial intelligence or machine-learning models. Humans do not read this data except with your explicit permission (for example, to resolve a support issue you raise), when required for security investigations, or to comply with applicable law.

Orbit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar at any time from Settings → Integrations inside Orbit — doing so deletes our stored tokens and stops all syncing — or revoke Orbit's access from your Google Account permissions page. You may also ask us to delete previously synced event copies by emailing [email protected].

How we use information

• to provide, maintain, and improve the Orbit service;
• to sync data with services you explicitly connect (Google Calendar, QuickBooks Online, material suppliers);
• to send transactional messages you initiate (proposals, invoices, booking confirmations) and service notices;
• to process payments through Stripe;
• to protect the service and its users (fraud prevention, security monitoring, legal compliance).

We do not sell personal information, and we do not use your data for third-party advertising.

Sharing

We share data only with service providers needed to run Orbit — hosting and database infrastructure, Stripe for payments, email delivery, and the third-party services you choose to connect — each bound to use it only to provide their service to us. We may also disclose information when required by law or to protect the rights, safety, and security of Orbit and its users. If Orbit is ever involved in a merger or acquisition, data may transfer under the same protections.

Cookies & analytics

We use two kinds of cookies. Neither is used for advertising, and we run no ad networks, retargeting pixels, or third-party trackers on any page.

• Strictly necessary — one session cookie that keeps you signed in. Without it the app cannot tell your requests apart, so it cannot be turned off.
• Analytics — on our public marketing pages, and only there, we use Google Analytics to understand which pages people find useful. It sets first-party cookies that give your browser a random identifier so repeat visits can be counted as one person. We do not use it inside the Orbit app, and we never place it on the pages your own customers see — proposals, invoices, e-sign documents, photo reports, estimators, and booking pages carry no analytics at all.

If you are in the EEA or the United Kingdom we do not load Google Analytics at all, so no analytics cookie is ever set on your device and there is nothing for you to consent to or opt out of. Everywhere else you can opt out with Google's browser opt-out add-on or by blocking cookies for this site — the site works normally either way.

Security

All traffic is encrypted in transit with TLS. Data is stored in access-controlled databases; integration tokens and supplier credentials are encrypted at rest with AES-256. Access to production systems is limited, authenticated, and logged. No method of transmission or storage is 100% secure, but we work to protect your information with industry-standard safeguards.

Retention & deletion

We keep your data for as long as your company's account is active. Disconnecting an integration deletes its stored tokens. When an account is closed, we delete or anonymize its data within a commercially reasonable period, except where retention is required for legal, tax, or security reasons. You can request deletion at any time by emailing [email protected].

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Contact us and we will honor applicable requests. Orbit is a business tool and is not directed to children under 16.

Changes

If we make material changes to this policy we will update this page and revise the effective date, and for significant changes we will notify account owners by email.