Privacy Policy

Effective Date: November 1, 2026 · Last Updated: November 1, 2026

1. Introduction

Welcome to Orbitex Sync ("Orbitex Sync", "we", "us", or "our"), a software-as-a-service platform operated by Orbitex FZE LLC, a company registered in Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.

2. Scope of This Policy

This Policy applies to personal information processed through:

Our public website and associated webpages.
Account registration, authentication, and profile management.
SaaS subscriptions and access-plan purchases.
Invoice tracking and related business information.
Marketing performance and return-on-investment analytics.
Customer analytics and business reporting.
Customer service, technical support, and communications.
Payment confirmation, invoicing, and transaction records.
Website security, diagnostics, and service administration.

This Policy does not automatically apply to third-party websites or applications that are independently operated and have their own privacy policies.

3. Categories of Information We Collect

3.1 Personal and Account Information

Depending on how you interact with our platform, we may collect:

Full name.
Email address.
Business or organization name.
Country or region.
Telephone number, if provided.
Account identifiers.
Authentication-related information.
Communication preferences.
Subscription and account status.

We collect only information reasonably necessary for legitimate and disclosed business purposes.

3.2 Business and Platform Information

When you use Orbitex Sync, you may provide information relating to your business operations, including:

Invoice records and invoice references.
Customer or supplier details included in uploaded business records.
Revenue and expense information.
Marketing campaign data.
Advertising expenditures and performance figures.
Business analytics and reporting information.
User-defined calculations, metrics, and settings.
Other information submitted through available platform features.

Some business records may contain personal data relating to employees, customers, suppliers, or other individuals.

You are responsible for ensuring that you have an appropriate legal basis or authorization to provide such information to our platform.

3.3 Payment and Transaction Information

When you purchase digital access, we may receive and retain limited transaction information, including:

Payment confirmation.
Transaction identifier.
Purchase amount and currency.
Purchased access plan.
Purchase and expiration dates.
Billing name and billing address, where collected.
Payment status.
Refund or payment dispute status.
Limited payment-method identifiers made available by the payment processor.

Payments may be processed by Stripe or another payment service provider displayed at checkout.

Payment service providers process payment information according to their own applicable privacy notices and security obligations.

We do not require customers to send complete payment card numbers, card verification codes, or banking passwords to our customer support team.

We do not intentionally store full payment card details in our ordinary platform account records.

3.4 Technical and Usage Information

When you access our services, technical information may be collected, such as:

IP address.
Browser type and version.
Device type and operating system.
Approximate location inferred from IP information.
Pages or features accessed.
Access timestamps.
Session and authentication events.
Application error logs.
Website performance and diagnostic information.
Security and fraud-prevention signals.

This information helps us maintain service reliability, detect abuse, troubleshoot technical problems, and improve the user experience.

3.5 Communications

If you contact us, we may process your message, email address, relevant account details, support history, and information voluntarily included in your communications.

We use such information to respond to requests, resolve complaints, provide technical assistance, and maintain appropriate support records.

4. How We Obtain Information

We may obtain information:

Directly from you through registration, checkout, account settings, forms, uploads, and communications.
Automatically through technical processes necessary to operate and secure the website.
From payment processors when they communicate transaction results.
From service providers supporting authentication, hosting, fraud prevention, or operational functions.
From third-party services that you voluntarily connect to Orbitex Sync, where such integrations are available and authorized.

We do not claim ownership of personal information merely because it has been uploaded to the platform.

5. Purposes of Processing Personal Information

We may process personal information to:

Register and administer user accounts.
Provide purchased SaaS functionality.
Activate and maintain digital access.
Authenticate users and protect accounts.
Process and reconcile transactions.
Generate receipts and transaction documentation.
Provide invoice tracking and analytics functionality.
Respond to customer inquiries and technical support requests.
Detect fraud, unauthorized access, and abuse.
Diagnose errors and improve platform security.
Maintain internal accounting and compliance records.
Comply with applicable laws and lawful requests.
Resolve disputes and exercise legal rights.
Send optional marketing communications where legally permitted.

We will not intentionally use customer-uploaded business records for unrelated advertising or sell those records to data brokers.

We will not use personal information for a materially incompatible purpose without identifying an appropriate legal basis and providing any notice or consent required by law.

6. Legal Basis for Processing

Depending on the circumstances and applicable jurisdiction, our processing may rely on:

Contractual necessity: Processing reasonably required to register accounts, provide purchased access, administer services, and fulfill customer requests.
Legal obligations: Processing required for financial reporting, accounting, tax compliance, consumer protection, or lawful regulatory requests.
Consent: Processing for activities requiring an individual's affirmative permission, such as certain marketing communications or non-essential tracking technologies.
Protection of rights and interests: Processing permitted by applicable legislation to establish or defend legal claims, prevent unlawful activity, or protect individuals and systems.

Where consent is the legal basis, you may withdraw it using the available communication or preference mechanisms, without affecting the lawfulness of earlier processing.

Where the UAE Personal Data Protection Law or another applicable law restricts processing without consent, we will rely only on a basis permitted under that law.

7. Business Customer Data and Processing Roles

When Orbitex Sync determines how and why information is processed for account administration, payments, security, or its own business operations, Orbitex FZE LLC generally acts as a data controller.

When a business customer uploads personal information about its employees, customers, suppliers, or other individuals for processing through the software, that business customer generally determines the purpose of the processing.

For those activities, Orbitex FZE LLC may act as a processor or service provider on behalf of the business customer, subject to applicable law and contractual arrangements.

Business customers are responsible for informing relevant individuals about their processing activities and obtaining appropriate authorizations where required.

Requests concerning information controlled by a business customer may need to be directed to that business customer.

Where legally required, additional data-processing terms may be necessary.

8. Payment Processing and Financial Information

Payments for Orbitex Sync are handled through the payment provider identified during the checkout process.

Where Stripe is the payment processor, Stripe may independently collect and process payment-related personal information for payment authorization, authentication, fraud prevention, compliance, and transaction administration.

For information about Stripe's privacy practices, customers may consult: https://stripe.com/privacy

Orbitex FZE LLC may receive payment confirmations, payment identifiers, and limited billing details necessary to fulfill purchases and manage refunds.

Payment information is not sold or knowingly disclosed for unrelated marketing purposes.

All payment transactions are subject to the applicable payment provider's technical and security controls.

9. Cookies and Similar Technologies

Our website may use cookies or comparable technologies to support:

Essential website operation.
Account authentication.
Session continuity.
Security and fraud prevention.
User preferences.
Performance and diagnostics.
Analytics, where enabled.
Optional marketing tools, where enabled and legally permitted.

Essential cookies are used to enable functions necessary for the requested service.

Non-essential cookies or tracking technologies will be managed according to applicable consent requirements.

Where required by law, users will be provided with an opportunity to accept or reject non-essential cookies before those technologies are activated.

Browser settings may also allow users to block or delete cookies, although restricting essential technologies may affect some functionality.

Third-party services may apply their own privacy policies where they independently process data.

10. Disclosure of Personal Information

We may share information with trusted parties where reasonably necessary, including:

Payment processors.
Website and application hosting providers.
Infrastructure and cybersecurity providers.
Authentication and account-management providers.
Email and customer-support providers.
Analytics or monitoring providers used to operate the service.
Professional legal, accounting, or compliance advisers.
Regulatory authorities where disclosure is legally required.

Service providers handling personal data on our behalf should be subject to appropriate contractual, confidentiality, and security obligations where required.

We may also disclose relevant information when reasonably necessary to investigate fraud, enforce our Terms & Conditions, respond to lawful proceedings, or protect the rights and safety of users.

We do not sell personal information as a standalone commercial product.

11. International Data Transfers

Orbitex FZE LLC operates from the United Arab Emirates, but service providers or technical infrastructure may operate in other countries.

Personal information may therefore be processed or accessed internationally where necessary to provide the services.

Where international transfers occur, we seek to implement safeguards appropriate to the nature of the information and the requirements of applicable data protection legislation.

Depending on the relevant jurisdiction, such safeguards may include contractual commitments, authorized transfer mechanisms, confidentiality requirements, technical protections, or another legally permitted arrangement.

The privacy and data-protection laws of a recipient country may differ from those of your own country.

12. Information Security

We recognize the importance of protecting customer information from unauthorized access, disclosure, alteration, loss, and misuse.

Our security approach is intended to include measures appropriate to the risks of processing, including access restrictions, authentication controls, infrastructure safeguards, monitoring, and appropriate protections for data transmission and storage.

No website, database, cloud service, or electronic communication system can be guaranteed to be completely secure.

Users are responsible for maintaining the confidentiality of their account credentials and notifying us promptly if they suspect unauthorized access.

If we become aware of a personal data security incident, we will assess the circumstances, take appropriate remedial steps, and provide notifications to affected individuals or competent authorities where required by applicable law.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, or for longer where required or permitted by applicable law.

Retention periods may depend on:

The duration of the customer relationship.
The nature of uploaded business information.
Outstanding contractual obligations.
Financial recordkeeping and tax requirements.
Fraud prevention and security needs.
Pending disputes or legal proceedings.
Applicable statutory retention periods.

When information is no longer required, we will take appropriate steps to delete, anonymize, or securely dispose of it, subject to technical limitations and lawful retention obligations.

Certain information may remain temporarily in backups until the applicable backup lifecycle is completed.

14. Account Closure and Data Deletion

Customers may contact info@orbitex-sync.com to request account closure or deletion of eligible personal information.

Before processing a request, we may need to verify the requester's identity or authority.

Where possible and legally appropriate, we will delete personal information that is no longer required.

Some records, particularly transaction documentation and legally required accounting information, may need to be retained despite account closure.

Requests involving information controlled by a business customer may require authorization from that customer.

Customers should export any information they need before their access expires or their account is closed, where an export function is available.

15. Your Privacy Rights

Depending on the applicable law and circumstances, individuals may have rights to:

Obtain information about personal data processing.
Request access to eligible personal information.
Request correction of inaccurate or incomplete records.
Request deletion where legally available.
Request restrictions on certain processing activities.
Object to certain processing activities where permitted.
Withdraw consent where processing relies on consent.
Request eligible data in a portable format.
Receive information concerning applicable automated decision-making.
Submit complaints to competent supervisory authorities.

Rights may be subject to statutory exceptions, verification requirements, and the respective responsibilities of controllers and processors.

To exercise a privacy right, contact: info@orbitex-sync.com

Please include sufficient information to identify the relevant account and describe your request. Do not email passwords or sensitive payment card details.

We will respond within the period required by the law applicable to the request.

16. Marketing Communications

We may send transactional communications necessary to operate the service, such as:

Account verification messages.
Purchase confirmations.
Payment receipts.
Important service notifications.
Security alerts.
Responses to support inquiries.
Material policy or service changes.

Optional promotional communications will be sent only where permitted by applicable law.

Where required, we will obtain consent before sending promotional messages.

You may request to stop receiving optional marketing emails by using any available unsubscribe mechanism or contacting us directly.

Opting out of marketing does not prevent necessary operational communications.

17. Children's Privacy

Orbitex Sync is intended for business and professional use and is not directed to children.

Users must be at least 18 years old, or otherwise possess the legal capacity required to enter into a binding contract in their jurisdiction.

We do not knowingly solicit personal information directly from children for the purpose of creating paid accounts.

If we become aware that personal information has been collected in circumstances that violate applicable child-protection legislation, we will take appropriate action.

18. Automated Analytics and Decision-Making

Orbitex Sync may use software-based calculations to organize, summarize, and display information provided by users.

Such functions may generate reports, performance indicators, financial summaries, or other business-related outputs.

These outputs are intended to assist human decision-making and should not be treated as independently verified financial, tax, legal, or investment advice.

We do not represent ordinary business analytics calculations as legally binding decisions concerning individuals.

If materially significant automated decision-making involving personal information is introduced, we will assess and provide any additional disclosures and safeguards required by law.

19. Third-Party Services and External Links

Our platform may contain links to websites or services operated by independent third parties.

We are not responsible for the privacy practices, security policies, or content of independently operated third-party websites.

Users should review the relevant third-party privacy notices before submitting information.

20. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect legal developments, changes in our services, technological developments, or revised operational practices.

The revised version will be published on our website with an updated effective or revision date.

Where legally required, we will provide additional notification or obtain consent before implementing material changes.

21. Applicable Law and Regulatory Rights

This Privacy Policy is intended to operate in accordance with the applicable laws of the United Arab Emirates, including the UAE Personal Data Protection Law.

Nothing in this Policy is intended to restrict privacy rights or consumer protections that cannot lawfully be excluded.

Where another jurisdiction's mandatory privacy rules apply, those rules will be respected to the extent required.

22. Privacy Contact

For privacy inquiries, personal-data requests, concerns, or complaints, contact:

Orbitex FZE LLC

Trade License Number: 4431897

SPC Free Zone, Sharjah, United Arab Emirates

Website: https://orbitex-sync.com

Email: info@orbitex-sync.com

Please use the subject line "Privacy Request" when contacting us about personal information.

We will review requests in accordance with applicable law.