Legal

Privacy policy

Last updated: 3 November 2026

This policy explains how Orbaura AI ("Orbaura", "we") handles personal information collected through orbaura.ai, our free health check, demo bookings and the Orbaura Order Desk. We are incorporated in Ontario, Canada and serve businesses in the United Arab Emirates.

1. What we collect

Details you give us: your name, job title, work email, phone or WhatsApp number, company name and website, and anything you write in a form.
Files you upload for a health check, which are your company's business records. We ask you to remove personal data you don't need to share.
NDA acceptance records: the name and title you typed, the date and time, the NDA version, your IP address and browser details.
Order data processed for Order Desk clients under a separate agreement.
Technical data: basic server logs kept by our hosting provider. We don't use advertising cookies or third-party analytics on this site. Your browser may store a draft of the health check form on your own device, which you can clear at any time.

2. Why we use it

To prepare and send your health check report, and to contact you about it.
To schedule and run demos, and to answer your questions.
To keep evidence of the NDA you accepted.
To provide the Order Desk to clients who sign up.
To meet legal obligations and protect our rights.

We rely on your consent, on taking steps at your request before entering into a contract, and on our legitimate interest in running and improving our business.

3. Who we share it with

We don't sell personal information. We share it only with service providers that help us run Orbaura, under written confidentiality and data protection terms: Vercel (hosting and file storage), Attio (customer records), Resend (email) and Cal.com (scheduling), and any AI processing provider used for the Order Desk, under terms that don't allow it to train its models on your data. We may also disclose information when the law requires it.

4. Where it's stored

Our providers may store and process data outside the UAE and Canada, including in the United States and the European Union. We use providers that protect data with appropriate safeguards. Order Desk clients can ask for processing and storage in a UAE region.

5. How long we keep it

Health check files: deleted automatically within 30 days of upload, or sooner on request.
NDA acceptance records: for the term of the NDA and three years after.
Contact and company details: while we're in touch, and up to three years after our last contact, unless you ask us to delete them sooner.

6. Your rights

Depending on where you are, including under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and Canada's PIPEDA, you can ask to access, correct or delete your personal information, object to or restrict how we use it, or withdraw consent. Email hello@orbaura.ai and we'll respond within 30 days.

7. Security

We encrypt data in transit and at rest, keep uploaded files in private storage, limit access to the people who need it, and will tell affected clients within 72 hours of discovering unauthorised access to their data.

8. Changes

We'll post any changes on this page and update the date above.

9. Contact

Orbaura AI, Ontario, Canada · hello@orbaura.ai