Privacy Policy

1. Introduction

ORBINE is a relationship intelligence platform operated by Quintari LLC ("Quintari", "we", "us", "our"). This Privacy Policy explains how we collect, use, and protect information when you use orbine.app, the ORBINE iOS app, and related services (collectively, "ORBINE").

2. Information You Provide

• Account credentials — the email address and password you sign in with, or the identity you share when you use Sign in with Apple or Sign in with Google, and one-time codes we email you to confirm it’s you.
• Personal card content — name, title, bio, links, and an optional avatar you publish on your personal profile.
• Workspace and business card content — company name, tagline, logo, address, and phone number you publish for a workspace.
• Relationship and workspace data — Connections, companies, deals, tasks and follow-ups, sessions, projects, notes, files, and documents you create in your Personal workspace or in Business workspaces.
• Captured contacts — information visitors submit through your shared cards (for example name, email, phone, company, and a note).
• Meeting context — where and when you met someone, the events you choose or confirm for that (including during Event Mode), and the calendar address you add if you choose to show your own calendar in ORBINE (see §6A).
• Support inquiries — messages you send to our support email addresses.
• Payment details — handled directly by Stripe (see §7). ORBINE does not store full card numbers.

3. Information Collected Automatically

• IP address, user agent, and basic device characteristics.
• Security event logs used to detect abuse and fraud.
• Rate-limit signals (including a device identifier) on public capture endpoints to prevent spam.
• Location, only when you ask. If you tap Use my location while recording where you met someone, ORBINE uses your device’s approximate position once to suggest the place. It is never collected in the background. If you confirm a place, ORBINE stores its name, address, and a rounded position (about 100 m) with that event.

4. Public Profiles & Cards

Your Personal card and any Business card you share (at addresses such as orbine.app/k/…, /p/…, and /c/…) are intentionally public. Anyone with the URL — or who scans the QR code that encodes the URL — can view the card. You control what appears on each card and can update or remove fields at any time. Do not publish information you do not want to be publicly accessible.

5. Personal Capture vs. Workspace Capture

ORBINE separates two different capture surfaces:

• Personal capture — when a visitor submits their info on your Personal card, the entry is stored privately in your Personal workspace and is visible only to you.
• Business capture — when a visitor submits their info on a Business card, the entry is stored in that card’s workspace as a New Connection for the person whose card it is, and is visible to them. It is shared with other members of the workspace only if they choose to share it.

When someone shares their details through a card, ORBINE emails the card holder a notice with those details and sends the visitor a confirmation, which may invite them to create their own ORBINE profile. A signed-in ORBINE user who saves someone’s card keeps that copy in their own Personal workspace.

6. Workspace Data Ownership

Each workspace is an isolated tenant. Workspace owners control membership and data access. Members can only see data inside the workspaces they belong to, enforced at the database layer. Within a Business workspace, a Connection belongs to the member who established it and is private to them unless they share it with the team. Your Personal workspace is yours alone. We do not sell, rent, or share workspace data with third parties for marketing.

6A. Calendars, Meeting Context & Event Mode

These features are optional and visible only to you; they are never shown to teammates.

• Your own calendar. If you add your calendar’s private subscription address, ORBINE reads the events in it (title, time, location, and status) so it can show them beside your ORBINE schedule and suggest where you met someone. You can remove it at any time in Settings → My Account → Calendars, which stops ORBINE reading it. ORBINE never writes to your calendar.
• Meeting context. When you record where you met someone, ORBINE stores the event or place you chose and keeps a history of changes you make to it, so the record stays accurate. You can change or remove it at any time.
• Event Mode. While you have Event Mode on, people you meet through your cards are linked to the event you started it for. You end it whenever you like.
• Calendar feed. If you create one, your calendar feed lets your own calendar app show your ORBINE tasks and sessions through a private link you can regenerate in Settings → Workspace → My Calendar Feed.

7. Payments

Subscription billing for ORBINE is processed by Stripe. Where ORBINE's tenant payment features are available to your workspace and you choose to use them, funds flow through Stripe Connect using an Express connected account that you authorize. Stripe is an independent processor and handles your payment card information directly under its own privacy practices. ORBINE never stores full card numbers.

8. Service Providers

ORBINE uses the following third-party processors to operate the service:

• Supabase — Postgres database, authentication, storage, and edge functions. ORBINE's sole system of record.
• Vercel — hosting for the orbine.app website.
• Resend — delivery of the email ORBINE sends (see §10A).
• Stripe — platform billing (subscriptions, customer portal, checkout).
• Stripe Connect — tenant-side payments (Express accounts, payment links, invoices), where enabled.
• Apple — iOS App Store distribution, Sign in with Apple, and push notifications (Apple Push Notification service).
• Google — Sign in with Google, and the web fonts our pages load (Google Fonts), which receives your browser’s IP address.
• Anthropic — the AI assistant, when you use it (see §16).
• Place lookup — map services that turn an approximate position into a place name when you tap Use my location (OpenStreetMap-based services such as Photon and Nominatim, and Apple Maps). They receive only rounded coordinates, sent from ORBINE’s servers rather than your device.

Each provider has its own privacy policy governing data it processes on our behalf.

9. Cookies & Local Storage

ORBINE uses your browser's local storage to keep you signed in (Supabase session token), to remember your selected card type on the share screen, and to cache your card for offline display, plus a small cookie that tells orbine.app you are signed in so it opens the app instead of the homepage. These items reside on your device and are cleared when you sign out. ORBINE does not use advertising or third-party analytics trackers.

10. Push Notifications

If you enable notifications, we store a device push token (issued by Apple) linked to your account to deliver reminders such as due follow-ups and tasks. Notification payloads contain only counts or a fixed message for the kind of notification — never contact names or personal details. You can disable notifications anytime in Settings or iOS Settings; tokens for disabled devices are deleted.

10A. Email

ORBINE sends email through Resend: account email (sign-in and verification codes, password resets, invitations to a workspace, security notices), a welcome message when you join, notices when someone shares their details through your card, and messages you choose to send from ORBINE to your own contacts (for example a link to a document). We record whether these emails were delivered, bounced, or marked as spam, so we can protect deliverability and stop sending to addresses that fail. Product and update emails include an unsubscribe link and an email-preferences page.

11. Retention & Account Deletion

You can delete your account from Settings → My Account → Personal Info → Delete Account (on iPhone: Settings → your account → Personal Info → Delete Account). The flow requires you to (a) type the phrase DELETE MY ACCOUNT and (b) re-verify your identity with your password, a one-time email code, or (on iPhone, if you use it) Sign in with Apple. The deletion itself runs as a resumable, server-side process. Step-by-step instructions are at orbine.app/delete-account. When you delete your account:

• Deleted: your sign-in identity, your user profile, your cards, your calendar connections and the events read from them, and the meeting context you recorded.
• Closed with your account: workspaces that only you use, including your Personal workspace. Their contents (including contacts captured by your cards) are removed from the service, and any ORBINE subscription on them is cancelled.
• Retained but unassigned: contacts, tasks, deals, sessions, and documents you created in workspaces you do not own. Workspace administrators can reassign them.
• Blocked: if you own a workspace that other members still use, deletion is blocked until you resolve it. The deletion dialog lets you transfer ownership or delete the workspace directly, without leaving the flow.
• Apple Sign-In follow-up: if you signed in with Apple, your Apple ID association lives in Apple's system, not ORBINE's. After deletion, open iPhone Settings → [your name] → Sign in with Apple → ORBINE and tap Stop using Apple ID to complete the cleanup on Apple's side.
• Records we keep: limited records needed for security, fraud prevention, and legal compliance — such as a record that the deletion took place and security logs — and billing records held by Stripe.
• Disconnecting a provider is separate: you may remove Apple, Google, or other third-party sign-in providers from your account at any time in Settings → My Account → Personal Info → Connected Sign-In Methods. This is optional and does NOT delete your account or data.

12. Security

We use transport encryption (HTTPS), workspace isolation enforced via row-level security, and offer multi-factor authentication. No system is perfectly secure, and we make no certifications of compliance with standards we have not formally audited against.

13. Children & Minimum Age

ORBINE is not directed to children under 13 (United States) or under 16 (European Economic Area). We do not knowingly collect data from individuals below those ages.

14. Your Choices

You can access, correct, or delete your account information from in-app Settings, and export a workspace’s data as CSV files from Settings → Data & Configuration → Export on the web. For additional privacy requests, see our Privacy Choices page or contact privacy@quintari.io.

15. International Users

ORBINE is operated from the United States. By using the service, you understand that your data is processed in the United States.

16. AI-Assisted Features

Some workspaces include an AI assistant on deals, projects, and SmartDocs. It runs only when you ask it to, and is clearly identified in-product. When you use it, the content of that record (for example a deal’s details and notes, or a document’s text) is sent to our AI provider, Anthropic, to produce the response. AI features operate on data you have already entered into your workspace and are not used to train third-party models. AI features are not generally available across all surfaces today.

17. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the platform or by email. Continued use of ORBINE after changes constitutes acceptance.

18. Contact

For privacy questions or requests, contact privacy@quintari.io.