Home

Legal

Privacy Policy

Effective February 28, 2025Last updated July 6, 2026

Orbion GmbH · Corinthstraße 38, 10245 Berlin, Germany

This Privacy Policy explains how Orbion GmbH (“Orbion”, “we”, “us”) collects, uses, and protects personal data when you use our platform and website. Orbion GmbH is the data controller for the processing described here.

1. Information We Collect

  • Account & registration data: your name, email address, job title, and organization.
  • Billing data: information necessary to process payments.
  • Communications: anything you send us through support, live chat, or email.
  • Usage data: IP address, browser type, access times, pages viewed, referring URL, and in-product events.

2. How We Use Your Information, and Our Legal Basis

We process personal data for the following purposes, on the following legal bases:

Provide, operate, and maintain the platform; manage your accountPerformance of a contract
Process billing and paymentsPerformance of a contract
Analytics and product improvement (Google Analytics, PostHog)Consent, via our cookie banner
Marketing and promotional emails (Loops)Consent; opt-out available
Live chat and customer support (Intercom)Contract / legitimate interest
Security, fraud prevention, and service integrityLegitimate interest
Retention of invoices and tax recordsLegal obligation

3. Cookies and Similar Technologies

Strictly necessary cookies operate without your consent. Analytics and functional cookies are set only with your consent via our cookie banner, which you may grant, decline, or withdraw at any time.

4. Sub-processors and Third-Party Services

We rely on the following sub-processors and third-party services:

  • Microsoft Azure — platform hosting (EU).
  • PostHog — product analytics (EU).
  • Sentry — error monitoring (EU).
  • HubSpot — CRM (US, EU–US Data Privacy Framework).
  • Intercom — customer support (US, Data Privacy Framework).
  • Loops — marketing email (US, Data Privacy Framework).
  • Twilio / SendGrid — transactional email (US).
  • Microsoft 365 / Google Workspace — internal operations (EU).
  • Google Analytics — website analytics.

5. International Data Transfers

Where personal data is transferred outside the EEA, we rely on adequacy decisions, the EU–US Data Privacy Framework certification of the recipient, or Standard Contractual Clauses together with supplementary measures.

6. Data Retention

We retain account data for the duration of our relationship with you plus a reasonable period thereafter. Analytics data is deleted or anonymized as appropriate. Billing and tax records are retained as required by German law (generally ten years).

7. Security

We maintain an information security program aligned with ISO/IEC 27001, including encryption, access controls, and regular review.

8. Your Privacy Rights

You have the right to access, rectify, erase, and restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time.

To exercise these rights, contact legal@orbion.life; we will respond within one month. You also have the right to lodge a complaint with the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI).

9. Marketing Opt-Out

You can unsubscribe from marketing emails via the link in any such email, or by contacting legal@orbion.life. Opting out does not affect transactional or service-related messages.

10. Children

The platform is not directed to individuals under the age of 16, and we do not knowingly collect their personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version always applies, and we will notify users of any significant changes.

12. Contact

For any privacy-related questions, contact Orbion GmbH at legal@orbion.life.

Orbion GmbH

Corinthstraße 38, 10245 Berlin, Germany

legal@orbion.life