Privacy Policy
Last updated: November 3, 2026
Summary
OrbisField provides a multi-tenant field-visit tracking platform. We collect only the data needed to deliver that service: account details, organisational hierarchy, business information uploaded by tenants, and location signals streamed by Sales reps during working hours.
What we collect
- Account information: name, email, phone, hashed password.
- Organisation data: company name, address, tax number, branding.
- Usage data: visit logs, photos uploaded by users, GPS coordinates during work hours.
- Billing data: invoices, payments, and tax identifiers — Stripe stores card details, not us.
- Diagnostic logs: rate-limited audit trail and error logs to keep the service reliable.
How we use it
We use this data only to operate the OrbisField service: showing live maps to managers, generating performance reports, sending transactional emails (account creation, payment receipts, password resets) and satisfying tax compliance. We do not sell personal data, ever.
Where it lives
All customer data is hosted in encrypted PostgreSQL databases. Backups are encrypted at rest. All traffic between client and server is encrypted in transit. Card data is handled exclusively by Stripe — we never see your card number.
Your rights (GDPR)
You may request access, correction or erasure of your personal data at any time by emailing privacy@orbisfield.app. Tenant Super Admins are the data controllers for their own field employees; OrbisField acts as the data processor under a standard DPA.
Retention
We retain customer data for the lifetime of the subscription plus a grace period of 90 days, after which it is permanently deleted. Billing records are kept for the period required by applicable tax law.
Contact
Questions about this policy can be sent to privacy@orbisfield.app.