1. About Us

Orbital ERP ("we", "our", or "us") is a cloud-based Enterprise Resource Planning (ERP) platform operated by Orbital ERP, located at 9, Devshrut Villa, Opposite Samarth Heaven 5, Ahmedabad, Gujarat 382426, India. This Privacy Policy describes how we collect, use, store, and share information when you use our website at orbitalerp.in and our related services (collectively, the "Service").

2. Information We Collect

We collect the following categories of information:

Account Information: Name, email address, phone number, and organization details provided during registration.
Business Data: Invoices, contacts, inventory records, accounting entries, and other business information you enter into the platform.
Payment Information: Billing address, subscription plan details, and transaction references. We do not store full card numbers or CVV codes — all payment card data is processed directly by our PCI-DSS-compliant payment processor (Razorpay). We only store masked card identifiers and transaction IDs for billing records.
Usage Data: Log data, IP addresses, browser type, pages visited, and other diagnostic information collected automatically.
Communication Data: Messages you send us via contact forms, email, or chat support.
Integration Data: If you connect third-party integrations (e.g. WhatsApp Business API, GST portal), we store the data necessary to provide those integrations.

3. How We Use Your Information

We use your information to:

Provide, operate, and maintain the Service.
Process subscription payments and manage billing.
Send transactional communications (invoices, payment receipts, OTPs, password resets).
Respond to support queries and provide customer assistance.
Comply with applicable legal and regulatory obligations (e.g. GST, income tax).
Detect fraud, abuse, and security incidents.
Improve product features and user experience based on aggregated analytics.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Payment Data and Security

Orbital ERP uses Razorpay as its payment processing partner. All payment card data, UPI, and net banking transactions are handled directly on Razorpay's PCI-DSS Level 1 certified infrastructure. We do not receive or store your full card details on our servers.

Payment-related data shared with us is limited to: subscription plan, amount charged, transaction ID, payment method type (e.g. card, UPI), and masked last 4 digits. This information is stored securely and used solely for billing, reconciliation, and legal compliance.

5. Data Sharing

We may share your data with:

Payment processors: Razorpay, for processing subscription payments.
Cloud infrastructure providers: Hosting, storage, and database services.
Communication providers: Email and SMS services for transactional messages.
Analytics tools: Aggregated, anonymized usage analytics only.
Legal authorities: When required by law, court order, or to protect our rights.

All third-party service providers are bound by confidentiality agreements and process data only as instructed by us.

6. Data Retention

We retain your account and business data for as long as your subscription is active, or as required by applicable Indian law (e.g. accounting records under the Companies Act 2013 for 8 years). Upon account deletion, personal data is anonymized or deleted within 30 days, except where retention is required by law.

7. Your Rights and Data Deletion

You have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your personal data (subject to legal retention requirements).
Export your business data in a standard format.
Withdraw consent where processing is consent-based.

To exercise any of these rights, email us at admin@orbitalerp.in. We will respond within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies for authentication, session management, preferences, and analytics. Essential cookies are required for the Service to function. You can control non-essential cookies through your browser settings. Disabling cookies may affect Service functionality.

9. Data Security

We implement industry-standard technical and organizational security measures including TLS/SSL encryption in transit, encrypted storage at rest, role-based access control, and regular security audits. For details, see our Security page.

10. Children's Privacy

The Service is intended for business use by individuals aged 18 and above. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on our website. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, requests, or complaints:

Email: admin@orbitalerp.in
Phone: +91 7778878433
Address: 9, Devshrut Villa, Opposite Samarth Heaven 5, Ahmedabad, Gujarat 382426, India