Legal

Privacy Policy

Effective June 21, 2026

1. Overview

Orbis is operated by Kyren Mearr Cabellon, an individual doing business under the name Orbis, based in the Republic of the Philippines. References to "we", "us", or "our" in this policy refer to Kyren Mearr Cabellon operating as Orbis.

This Privacy Policy explains what data we collect, how we use it, and your rights with respect to your personal information. It is written in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By creating an account or using the Service, you acknowledge that you have read and understood this policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect information in the following ways:

Information you provide directly:

  • Account information: your name, email address, and password when you register
  • Profile updates or settings you configure in the app
  • Messages or feedback you send to us

Information from third-party integrations:

  • When you connect JIRA, ClickUp, or Confluence, we access project data, ticket descriptions, board structure, and team information from those services. We access only what is necessary to provide the Service.

Information collected automatically:

  • Usage data such as pages visited, features used, and session duration
  • Device and browser information including browser type, operating system, and IP address
  • Cookies and similar tracking technologies (see Section 9)

3. How We Use Your Information

We use your information to:

  • Provide, operate, and improve the Service
  • Generate AI-assisted ticket drafts, edge case suggestions, and product guide entries using the content you provide
  • Authenticate your account and manage your subscription
  • Send transactional emails such as account confirmations and billing receipts
  • Monitor for abuse, security incidents, and technical errors
  • Respond to your support requests

We do not sell your personal information. We do not use your content to train AI models.

5. AI Processing

Orbis uses Claude, an AI model provided by Anthropic, to process the content you provide and generate outputs such as ticket drafts and product guide entries.

When you use AI features, the relevant content (such as ticket context, board descriptions, and project information) is sent to Anthropic's API for processing. Anthropic does not use API inputs to train their models by default. You can review Anthropic's privacy practices at anthropic.com/privacy.

We process only the content necessary to fulfill your request. We do not share your content with Anthropic for training purposes.

6. Third-Party Service Providers

We share data with trusted third parties only as necessary to operate the Service:

  • Supabase: database and authentication infrastructure. Your account data and project data are stored in Supabase.
  • Anthropic: AI processing. Ticket context is sent to Claude's API to generate drafts and suggestions.
  • Lemon Squeezy: payment processing. We do not store your full payment card details. Billing data is handled directly by Lemon Squeezy.
  • Atlassian (JIRA and Confluence): integration APIs. We read and write data from your connected JIRA and Confluence accounts based on your requests.
  • Google Analytics: website analytics. We collect anonymized usage data using Google Tag Manager.
  • Microsoft Clarity: session recording and heatmaps. We use Clarity to understand how users interact with the app.
  • Vercel: hosting and edge delivery. Your requests are routed through Vercel's infrastructure.

Each of these providers has their own privacy policies governing their use of data. We share only the minimum data necessary for each provider to perform their function.

7. International Data Transfers

Orbis is based in the Philippines. When you use the Service, your data may be transferred to and processed in countries outside the Philippines, primarily the United States, where our sub-processors (Supabase, Anthropic, Google, Microsoft, and Vercel) are located.

We transfer data to these providers only under appropriate contractual safeguards. Where applicable, we rely on Standard Contractual Clauses (SCCs) to legitimize transfers from the European Economic Area to the United States.

If you are located in the European Union or European Economic Area, please be aware that the Philippines does not currently hold an EU adequacy decision. We rely on SCCs with our US-based sub-processors to provide appropriate safeguards for your data.

By using the Service, you acknowledge that your data may be transferred to and processed in the United States and other countries outside your own.

Enterprise or institutional users who require a Data Processing Agreement (DPA) under GDPR Article 28 or equivalent laws may request one by contacting kyren@orbisboards.com.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or financial compliance.

Financial and billing records, including subscription history and payment confirmations, are retained for up to 7 years to comply with applicable tax and accounting obligations under Philippine law.

Data from third-party integrations (such as JIRA ticket content) is not permanently stored beyond what is necessary to serve your active session and generate outputs.

Aggregated, anonymized usage data may be retained indefinitely for analytics purposes.

9. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

  • Session management (essential): to keep you logged in while using the app. These cookies are strictly necessary and cannot be disabled without breaking core functionality.
  • Analytics (non-essential): Google Analytics uses cookies to measure site traffic and usage patterns.
  • Session recording (non-essential): Microsoft Clarity uses cookies and local storage to record user sessions for usability analysis.

Non-essential cookies are only placed with your consent. You may decline non-essential cookies or withdraw consent at any time through your browser settings. Declining non-essential cookies does not affect your ability to use the core Service.

10. Your Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173) and applicable laws in your jurisdiction, you have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you
  • Correction: request that we correct inaccurate or incomplete data
  • Deletion (Erasure): request that we delete your personal data where it is no longer necessary for the purpose it was collected
  • Portability: request your data in a structured, machine-readable format
  • Objection: object to certain types of processing, such as analytics or direct marketing
  • Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

Philippine users may lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe your rights have been violated.

California residents: under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at kyren@orbisboards.com.

To exercise any of these rights, contact us at kyren@orbisboards.com. We will respond within 30 days.

11. Security

We implement industry-standard security measures including encryption in transit (HTTPS), encrypted database storage, and access controls to protect your data.

No system is completely secure. While we take reasonable steps to protect your information, we cannot guarantee its absolute security. If you become aware of a security issue, please contact us at kyren@orbisboards.com.

12. Children

The Service is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date.

Your continued use of the Service after any changes constitutes acceptance of the updated policy.

14. Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, contact:

Kyren Mearr Cabellon kyren@orbisboards.com

Republic of the Philippines

You may also file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.

Questions about your data?

kyren@orbisboards.com