Scope
This page supplements the Orbitra Privacy Policy by explaining how data may be used in connection with the website, demos, pilots, evaluations, and customer-authorized product workflows. Orbitra Security is a Canadian company and handles data under applicable Canadian requirements and customer agreements.
When a customer signs a separate agreement with Orbitra, that agreement controls any conflicting terms for customer data, product data, retention, security, and support.
Data Categories We May Handle
- Business contact data, such as name, work email, company, role, and communications.
- Demo request data, such as team size, use case, security priorities, and meeting notes.
- Customer-authorized identity security context, such as tenant configuration details, identity events, role or permission metadata, session context, application registration metadata, response records, and audit timelines.
- Operational data, such as logs, diagnostics, error information, usage metadata, and reliability signals.
- Support and success data, such as troubleshooting details, implementation notes, and customer feedback.
How We Use Data
- Provide demos, answer questions, and evaluate fit.
- Connect to customer-authorized systems and perform requested security workflows.
- Map identity relationships, detect, triage, recommend, contain, verify, and document identity security events when authorized.
- Generate audit records, response timelines, and evidence exports.
- Maintain reliability, troubleshoot errors, secure systems, and prevent misuse.
- Improve product functionality, documentation, onboarding, and support.
- Meet contractual, legal, compliance, and recordkeeping requirements.
AI-Assisted Analysis
Orbitra may use automated analysis and AI-assisted workflows to classify identity risk, summarize incident context, recommend response steps, and prepare audit-ready explanations.
Customer security data is used to provide, secure, support, and improve Orbitra services. Orbitra does not sell customer security data or demo request data.
Customer Controls
Customers decide whether to authorize a connection, what systems to connect, what response mode to enable, and what actions are permitted. Product workflows support observation, recommendation and approval modes. Autonomous execution is staged and not enabled for any tenant.
Customers are responsible for ensuring they have the rights and permissions needed to provide data to Orbitra and authorize requested workflows.
Limits on Use
- We do not sell visitor data, demo request data, or customer security data.
- We do not use customer security data to advertise unrelated third-party products.
- We do not intentionally collect sensitive personal information through the public website demo form.
- We use customer-authorized security data to operate, secure, support, and improve Orbitra, subject to applicable agreements.
Retention and Security
Retention periods may vary by data type, customer agreement, legal requirement, and operational need. When data is no longer needed, Orbitra deletes, de-identifies, or archives it according to applicable requirements and internal practices.
Orbitra uses reasonable safeguards designed to protect data from unauthorized access, loss, misuse, and alteration. Security controls may evolve as the product and company mature.
Contact
Questions about data use can be sent to hello@orbitrasecurity.com.
Last updated: July 8, 2026