Legal
Privacy Policy
1. Who we are
Orbinex AI is operated by Softvision Info Solutions Corp., 828 E Market St, Louisville KY 40206. For questions about this policy or your data, contact support@softvisioncorp.com.
2. Two different roles
This distinction matters, so it comes first.
- For our own customers — the businesses who subscribe to Orbinex AI — we are the controller. We decide what account and billing data we collect and why.
- For end-customer conversations — the people who message one of our customers' assistants — we are a processor. Our customer decides what is collected and why; we handle it on their instructions. If you are one of those people, contact the business you were messaging; we will pass on any request we receive directly.
3. What we collect
- Account data — name, work email, business name, and the password hash for your login.
- Billing data — plan, invoices, and the last four digits and brand of your card. Full card numbers are handled by Stripe and never reach our systems.
- Content you supply — website material, documents and configuration used to answer your customers.
- Conversation data — messages between your customers and your assistants, and whatever contact details those customers volunteer.
- Operational records — what each assistant did, when, and under whose permissions; usage counts for billing; and error diagnostics.
- Technical data — log entries needed to keep the Service secure and working.
We do not sell personal data, and we do not use it for advertising.
4. Why we process it
- To provide the Service you have subscribed to — performance of our contract with you.
- To bill you and keep accounting records — contract and legal obligation.
- To keep the Service secure, prevent abuse, and diagnose faults — our legitimate interests.
- To contact you about the Service, including changes that affect you — contract and legitimate interests.
5. AI processing
Conversations are processed by third-party AI model providers to generate replies. Message content and the material your assistant is configured to reference are sent to the provider for that purpose.
We use providers under terms that do not permit them to train their models on data we submit through their business APIs. Providers may retain content briefly for abuse monitoring under their own policies.
Assistants read the material you supply. They do not read data from other customers of Orbinex — each business's data is isolated at the database level.
6. Who processes data on our behalf
| Provider | Purpose | Data involved |
|---|---|---|
| OpenAI | Generating assistant replies and search indexes | Conversation content, your reference material |
| Chatwoot | Carrying Instagram and Messenger messages | Message content on those channels only |
| Meta Platforms | Instagram and Messenger delivery | Message content on those channels only |
| Stripe | Payment processing | Billing contact, card details (held by Stripe) |
| Cloudflare | Application hosting and database | All Service data at rest |
We will update this list before adding a sub-processor that handles customer data.
7. International transfers
Our providers operate in the United States and other countries. Where personal data moves out of its home region we rely on the transfer mechanisms our providers make available, including Standard Contractual Clauses where applicable.
8. How long we keep it
- Account data — while your account is active, then up to 12 months.
- Conversations and contact records — for the retention period you configure; where you set none, while your account is active.
- Operational and audit records — retained for security and accounting purposes on a defined schedule.
- Invoices and tax records — as long as the law requires, typically seven years.
After you cancel, you may export your data for 30 days. After that we delete or anonymise it, except records we must keep for legal or accounting reasons.
9. Security
- Data is encrypted in transit and at rest.
- Credentials you supply for connected systems are encrypted with a separate key before storage, are never returned by any endpoint, and are never exposed to an AI model.
- Each business's data is separated at the database level rather than by application filtering.
- Access to production data is limited to staff who need it, and administrative actions are recorded.
No system is perfectly secure. If a breach affects your data we will notify you without undue delay and tell you what we know.
10. Your rights
Depending on where you live you may have the right to access, correct, delete, port or restrict the processing of your personal data, and to object to it. Email support@softvisioncorp.com and we will respond within the time the law allows. You may also complain to your local data protection authority.
For data held on behalf of one of our customers, please contact that business — they decide what happens to it.
11. Cookies
This website uses no tracking or advertising cookies. The Orbinex application uses cookies that are strictly necessary to keep you signed in and to protect against cross-site request forgery.
12. Children
The Service is for businesses. It is not directed at children and we do not knowingly collect their personal data. If you believe we have, contact us and we will delete it.
13. Changes
We will post changes here and update the date above. For material changes we will notify you by email or in the product.