Privacy Policy

Effective: January 15, 2025 Version 2.1

1. Scope

This Privacy Policy applies to all users of Orban's services worldwide. By using our platform, you acknowledge that you have read and understood this policy.

Orban Platform Inc. ("Orban", "we", "us") is the data controller responsible for your personal data.

2. Information We Collect

Account Information

  • Email address and name
  • Company name and billing address
  • Payment information (processed by secure third-party providers)

Usage Data

  • API calls and compute resource usage
  • Log data and performance metrics
  • Device and browser information

User Content

  • Data you upload for AI training
  • Model configurations and outputs

3. How We Use Information

We use your information to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices and security alerts
  • Respond to your requests and provide support
  • Monitor and analyze usage patterns
  • Detect and prevent fraud or abuse

4. Information Sharing

We do not sell your personal data. We may share information with:

  • Service providers who assist in our operations
  • Professional advisors (lawyers, accountants)
  • Law enforcement when required by law
  • Business partners with your consent

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account closure:

  • Personal data is deleted within 30 days
  • Transaction records are retained for 5 years (legal requirement)
  • Anonymized analytics may be retained indefinitely

6. Security

We implement industry-standard security measures:

  • Encryption in transit (TLS 1.3) and at rest (AES-256)
  • Regular security audits and penetration testing
  • Access controls and authentication requirements
  • 24/7 monitoring and incident response

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data (right to be forgotten)
  • Export your data (data portability)
  • Restrict or object to processing
  • Withdraw consent at any time

To exercise these rights, contact our privacy team.

8. GDPR Compliance

For users in the European Economic Area (EEA), UK, and Switzerland:

  • We process data under legitimate interest or with your consent
  • You may lodge a complaint with your local supervisory authority
  • Data transfers outside the EEA use Standard Contractual Clauses

9. Contact

For privacy-related inquiries:

  • Email: Contact Us
  • Address: Ball Technology Co., Ltd., Taiwan

We will respond to your request within 30 days.