Privacy Policy

1. Introduction

Orbli is operated by Wooden Donkey Ltd ("we", "our", or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at orbli.app.

We are a company registered in England and Wales and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Registered Office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF

2. Information We Collect

Personal Information You Provide

• Account Information: Email address and password when you create an account
• Birth Data: Date, time, and location of birth for astrological calculations
• Payment Information: Processed securely by Stripe; we do not store card details
• Communications: Messages you send to our support team

Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with our service
• Device Information: Browser type, operating system, and device identifiers
• Cookies: See our Cookie Policy for details

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain our astrological services
• To calculate your birth chart and personalized insights
• To process payments and manage your subscription
• To send service-related communications
• To respond to your enquiries and support requests
• To improve and develop our services
• To comply with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we process your data based on:

• Contract: To provide the services you've requested
• Consent: Where you've given explicit consent (e.g., marketing emails)
• Legitimate Interests: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws

5. Data Sharing

We share your information only with:

• Supabase: Our database and authentication provider (EU-based)
• Stripe: For payment processing (PCI-DSS compliant)
• Vercel: Our hosting provider
• xAI: For AI-powered features (data anonymized where possible)

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your data within 30 days, unless we're required to retain it for legal purposes.

7. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Object: Object to certain processing activities
• Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at support@orbli.app

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS/SSL) and at rest, secure authentication, and regular security assessments.

9. International Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Email: support@orbli.app

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk