1. Introduction
OrbitExSpace Inc. ("OrbitExSpace", "we", "us", or "our") is committed to protecting the privacy and security of individuals who interact with our digital properties. This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the parties with whom it may be shared, the safeguards we apply, and the rights and choices available to you.
This policy applies to the OrbitExSpace website located at orbitexspace.com (the "Site"), any subdomains associated with it, and our publicly accessible digital channels. It does not apply to third-party websites or services that we may link to, which are governed by their own privacy practices. We encourage you to review the privacy policies of any third-party services you use.
We have designed our data practices to be minimal, purpose-limited, and transparent. We are an engineering company building autonomous robotic systems and habitat infrastructure — not a data brokerage or advertising business. The information we process is the information needed to operate the Site, respond to legitimate inquiries, and maintain the security and integrity of our systems.
2. Data Controller
The controller responsible for the processing of personal data described in this policy is:
OrbitExSpace Inc.
Los Angeles, California
United States of America
legal@orbitexspace.com
For any privacy-related inquiry, request, or complaint, you may contact us at the address above or by writing to legal@orbitexspace.com. We will acknowledge your request without undue delay and respond in accordance with applicable law.
3. Scope and Applicability
This policy applies to all visitors of the Site, including prospective partners, customers, investors, and members of the public who interact with our digital presence. It covers both passive data collection (such as server logs) and active data collection (such as information submitted through our contact form).
The policy does not apply to data collected through offline channels, contractual relationships, employment, or systems that are governed by separate agreements. Where a separate written agreement governs the processing of personal data — for example, in the context of a vendor, partner, or employment relationship — that agreement controls.
This policy is intended to comply with applicable data protection laws, including the California Consumer Privacy Act (CCPA) and California Online Privacy Protection Act (CalOPPA), and, to the extent applicable to our processing of personal data of individuals in the European Economic Area, the United Kingdom, and Switzerland, the General Data Protection Regulation (GDPR) and equivalent national laws.
4. Categories of Personal Data
We collect the following categories of personal data:
- Identification and contact data — name, email address, organization, job title, and similar information you voluntarily provide through the contact form or email correspondence.
- Message and correspondence data — the content of inquiries, messages, and attachments you send to us, and our responses.
- Technical and usage data — IP address, browser type and version, device identifiers, operating system, referring URLs, pages visited, timestamps, and similar information collected from server logs and similar sources.
- Cookie and preference data — identifiers stored on your device that remember your consent choices and, where accepted, support analytics.
- Aggregated and anonymized data — statistical information that does not identify an individual and cannot reasonably be used to re-identify one.
We do not collect sensitive personal data such as government identification numbers, financial account credentials, health information, biometric data, or information about racial or ethnic origin, religious beliefs, or sexual orientation through the Site. If you inadvertently submit such information, please contact us so we can delete it.
5. Sources of Personal Data
We obtain personal data from the following sources:
Directly from you. When you submit the contact form, email us, or otherwise correspond with us, you provide the information included in that communication.
Automatically from your device. When you visit the Site, your browser and device transmit technical data such as IP address, browser type, and pages requested. This is logged by our hosting infrastructure for security and operational purposes.
From service providers. We may receive limited data from the providers of hosting, email, and analytics services that operate on our behalf as processors under our instruction.
We do not purchase personal data from data brokers, and we do not combine data you provide with data acquired from third-party data aggregators.
6. Purposes and Legal Bases
We process personal data for the following purposes:
- To respond to inquiries and communications — processing your name, email, and message content to understand and reply to your inquiry.
- To operate, maintain, and improve the Site — using technical and usage data to monitor performance, diagnose issues, and plan improvements.
- To protect the security and integrity of the Site — detecting, preventing, and investigating unauthorized access, abuse, or attacks.
- To comply with legal obligations — retaining records as required by applicable law and responding to lawful requests from authorities.
- To understand aggregate usage through analytics — only where you have accepted analytics cookies, and only in anonymized or pseudonymized form.
Under the GDPR, our legal bases for processing are: (a) your consent, where you submit information voluntarily or accept cookies; (b) our legitimate interests in operating the Site, securing our systems, and responding to business inquiries, balanced against your rights and reasonable expectations; and (c) compliance with legal obligations where applicable.
Under the CCPA, we process personal information for the business and commercial purposes described above. We do not sell personal information and do not process it for the purpose of inferring characteristics about a consumer.
9. International Data Transfers
OrbitExSpace is based in the United States. If you access the Site from outside the United States, your personal data will be transferred to and processed in the United States. By using the Site, you consent to this transfer.
Where we transfer personal data of individuals in the European Economic Area, the United Kingdom, or Switzerland to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism, unless an exception applies.
10. Data Retention
We retain personal data only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law or needed to establish, exercise, or defend legal claims. Our retention practices are guided by the following principles:
Contact and correspondence data. Retained for as long as needed to respond to and document the inquiry, and for a reasonable period thereafter to maintain a record of business communications, after which it is deleted or anonymized.
Server log data. Retained for a limited period to support security, troubleshooting, and operational analysis, then deleted or aggregated.
Consent records. Retained for as long as needed to demonstrate valid consent and to honor your preference.
When personal data is no longer needed, we delete it or render it permanently anonymous so that it can no longer be associated with you.
11. Security Measures
We implement reasonable technical, organizational, and physical safeguards designed to protect personal data against unauthorized access, loss, misuse, or alteration. These measures include encrypted transmission (TLS), access controls limiting data to authorized personnel, regular security reviews, and infrastructure operated by reputable cloud providers.
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security. In the event of a breach affecting your personal data, we will notify affected individuals and authorities where required by law.
12. Your Rights
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
- Right of access — to request confirmation that we process your data and a copy of the data we hold.
- Right to rectification — to request correction of inaccurate or incomplete data.
- Right to erasure — to request deletion of your data, subject to legal retention obligations.
- Right to restriction — to request that we limit processing of your data in certain circumstances.
- Right to data portability — to receive your data in a structured, machine-readable format and to transmit it to another controller.
- Right to object — to object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal.
- Right to lodge a complaint — with a supervisory authority, such as the California Attorney General or the data protection authority in your jurisdiction.
To exercise any of these rights, write to legal@orbitexspace.com. We will verify your identity before processing your request and respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.
13. California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights. We do not sell personal information, and we have not sold personal information in the preceding 12 months. We do not "share" personal information as defined by the CCPA for cross-context behavioral advertising.
California residents may request: (a) disclosure of the categories and specific pieces of personal information we collect; (b) deletion of their personal information; and (c) correction of inaccurate personal information. Requests may be submitted to legal@orbitexspace.com. We will verify your identity before responding and may decline requests that are fraudulent, unreasonable, or impossible to fulfill.
This policy is not intended to create rights enforceable against OrbitExSpace by parties other than California residents to whom it is addressed, and any such rights are disclaimed.
14. Children's Privacy
The Site is intended for a general audience and is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
15. Third-Party Links and Content
The Site may contain links to third-party websites or services that we do not control. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit. This policy applies only to data collected through the Site.
16. Analytics
Where you accept analytics cookies, we may use a privacy-respecting analytics service to collect aggregated, anonymized information about Site usage, such as the number of visitors, pages viewed, and general traffic patterns. We use this information solely to understand and improve the Site. Analytics data is not used to identify individuals or to build profiles for advertising.
17. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the version date at the bottom of this page. We will notify you of material changes by posting the updated policy on the Site. We encourage you to review this policy periodically. Your continued use of the Site after a change constitutes acceptance of the updated policy, except where your consent is required for the change, in which case we will obtain your consent.
18. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of personal data, please contact us:
OrbitExSpace Inc.
Los Angeles, California
legal@orbitexspace.com
Legal & Compliance Contact — legal@orbitexspace.com
This document is provided for informational purposes only and does not constitute legal advice or a representation of certification, accreditation, registration, Government approval, contract status, or authorization. OrbitExSpace programs are in development. Statements regarding FAR/DFARS, ITAR, EAR, NIST SP 800-171, CMMC, or other frameworks apply only where applicable and as required by contract or law.
OrbitExSpace Inc.