Private gatherings deserve thoughtful data care.

Orbit is a product operated through Sark Media and is responsible for personal information it collects to operate the platform. An event organizer independently decides whom to invite and what guest-specific information, modules, and external albums to use. Questions can be sent to our privacy contact at support@letsorbit.app.

Accounts: email address, display name, username, profile image link, authentication records, plan and storage usage, events created or saved, policy versions accepted, and support history.

Events and guests: event title, description, dates, itinerary, venue, coordinates, parking, accommodation, links, announcements, FAQs, guest-specific notes, display name, RSVP, attendance choices, messages, uploads, and the event-scoped guest session stored on the device.

Media: file name, type, size, content hash, image/video properties, temporary original, processed copy, thumbnail, uploader, processing state, and timestamps. Where supported, processing removes GPS and unnecessary image metadata.

Technical and safety information: IP-derived and device/browser signals, request timestamps, cookies, session tokens, security events, rate-limit identifiers, product interactions, errors, and diagnostic logs. We avoid placing invitation or guest-session secrets in logs.

We use information to create and authenticate accounts; deliver private invitations; personalize itineraries; record RSVPs; show venue, parking, weather, and event updates; process and deliver media; enforce storage and guest limits; preserve events saved to an account; provide support; prevent abuse; measure demand and reliability; improve Orbit; and comply with law.

Where applicable, our legal bases include performing our agreement with you, consent, compliance with legal obligations, and legitimate interests in providing, securing, supporting, and improving a private event service. Required processing is limited to what is reasonably necessary. Consent may be withdrawn subject to legal or contractual limits and the consequences described in Your Consent Choices.

The organizer can see and manage the event, guest list, RSVPs, guest messages, and contributed media. Invited guests may see information enabled for that event, including other participants’ display names, relevant itinerary items, messages, and shared media.

A valid invitation link provides access to the invitation, so recipients must keep it within the intended group. Orbit cannot control screenshots, downloads, or resharing by people who already received access.

Orbit uses carefully selected providers to perform services on our behalf. These may include Vercel for the web application, Supabase for authentication and database services, Backblaze B2 for private object storage, Railway for media processing, Resend and email infrastructure for transactional messages, Apple services for maps and weather, OpenAI for bounded event-artwork generation, and support, security, analytics, and advertising providers configured in the product.

When artwork generation is requested, Orbit sends a bounded event title and description—not the address, guest list, invitation/session secrets, or organizer account details. When an organizer links Google Photos or Apple Photos, Orbit stores the album link; content placed in that album is handled by the provider and album owner under their own settings and terms.

We may also disclose information with your direction; to investigate misuse; to protect people or rights; in a business transaction subject to appropriate safeguards; or when required by a valid legal process. We do not sell private event media or guest lists.

Orbit may show ads away from the public landing page. Where required, Google advertising storage and personalized advertising remain off until the visitor makes a choice through the consent controls. If consent is declined, ads may be non-personalized or not shown. Google and its partners may process device, cookie, approximate-location, and interaction data under their own notices. Some laws describe targeted-advertising disclosures as “sharing”; where that applies, the consent controls provide the available opt-out.

Essential cookies keep accounts and private guest sessions working and cannot be disabled without losing those features. Limited product analytics help measure clicks, demand, failures, and capacity. You can change optional advertising choices through the consent controls when available.

Free-event temporary originals are discarded after successful processing. Processed media, guest records, and event data normally follow the expiration date shown in the event—currently 30 days after the event ends—with guest uploads normally open for seven days after the end. Saved-account events or eligible upgrades may be retained longer while within applicable storage limits.

Security, consent, transaction, support, and deletion records may be kept longer where reasonably needed for fraud prevention, legal compliance, disputes, or accountability. Backups and deletion queues may take a limited time to cycle. When no longer needed, information is deleted or de-identified.

Orbit and its providers may process information in Canada, the United States, and other countries where they operate. Information may therefore be subject to the laws and lawful access requests of those places. We use contractual, technical, and organizational safeguards appropriate to the information and service.

Orbit uses private storage, scoped or short-lived media access, hashed invitation and session secrets, server-side access checks, rate limits, and restricted administrative access. No internet service can guarantee absolute security.

Residual risks include an invitation being forwarded, an attendee downloading or resharing media, an account or device being compromised, a provider outage or breach, and sensitive event details revealing attendance, relationships, or location. Share the minimum needed and avoid highly sensitive material.

Depending on where you live, you may request access to or correction of personal information; ask about use and disclosures; withdraw consent; object to or restrict certain processing; obtain a portable copy; or request deletion. You may also complain to the privacy regulator where you live.

Account holders can edit profile details and request deletion in Profile & Security. Guests can ask the organizer to remove them or contact us. We may need to verify identity and may retain information where law or a valid exception requires. Email support@letsorbit.app for a privacy request.

Orbit is not directed to children under 13 and does not knowingly allow them to create accounts or submit information directly. Organizers must not ask a child under 13 to join or upload. If an event includes children, an adult with authority must manage any information or media about them and obtain required permission.

If you believe a child supplied information without appropriate permission, contact us so we can investigate and delete it.

We will update the version date when this notice changes and will request renewed consent when a material new use requires it. Effective August 3, 2026.

Privacy questions or requests: support@letsorbit.app. Please write “Privacy request” in the subject and do not send invitation links or passwords by email.