Privacy & GDPR

Privacy Policy

Last updated: October 2026 · GDPR Compliant

1. Data Controller

The Data Controller responsible for your personal information is Infinity Consciousness Europe SIA, a limited liability company organized and existing under the laws of the Republic of Latvia, registration number 50203642241, VAT number LV50203642241, having its registered legal office at Vēja iela 4 – 2, Ādaži, Ādažu novads, LV-2164, Latvia. We are committed to protecting the privacy of our users in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

2. Information We Collect

  • Account Information: Name, email address, and authentication credentials when you sign up.
  • Workspace Data: Customer contact cards, deal pipelines, activities, notes, and form submissions created within your isolated tenant workspace.
  • Billing Information: Payment transactions, VAT identifiers, and billing addresses are processed directly and securely by Paddle.com as Merchant of Record. We never store raw credit card numbers.
  • Technical Logs: IP address, user agent, and session cookies strictly necessary to provide authentication and secure API access.

3. How We Use Data

We use your information exclusively to:

  • Provide, maintain, and secure your CRM workspace.
  • Authenticate your login sessions via Supabase Auth.
  • Synchronize subscription and billing statuses via Paddle webhooks.
  • Send critical security notifications, account verifications, and invoice receipts.

4. Data Isolation & Security

Orbit CRM utilizes PostgreSQL Row-Level Security (RLS) to cryptographically isolate each tenant workspace. Other users cannot query, view, or access your leads, contacts, or pipelines. All data in transit is encrypted using TLS 1.3, and cloud storage is hosted in European Union datacenters.

5. Your Rights Under GDPR

As a resident of the European Union or European Economic Area, you have the right to:

  • Access and receive a copy of your personal data.
  • Rectify inaccurate personal information.
  • Request erasure of your data ("Right to be forgotten").
  • Export your leads, contacts, and deals via standard CSV/JSON format.

6. Contact Us

For privacy queries or data subject access requests:
Infinity Consciousness Europe SIA
Vēja iela 4 – 2, Ādaži, Ādažu novads, LV-2164, Latvia
Email: privacy@orbit-suite-crm.app