Legal

Privacy notice (website)

This notice explains how orbitGRC handles information collected through our marketing website.

Scope

This notice covers visitors of orbitgrc.in only. Privacy for product customers is governed by the contractual data-processing terms entered into with each customer organization and is not in scope of this website notice.

What we collect

When you submit the demo form on this website, we collect the information you choose to provide: your name, work email, organization, role and the message text you write.

Why we collect it

We use the information you submit to respond to your demo, sales or support enquiry. We do not use website form submissions for unrelated marketing.

How we store it

Demo form submissions are forwarded to orbitGRC team mailboxes. We store the information only as long as needed to handle your enquiry and any reasonable follow-up.

Your rights

Under applicable Indian privacy law and other privacy laws that may apply to you, you have rights including access, correction and deletion of personal information you have submitted to us. To exercise these rights, please reach us via our contact page.

Analytics

When NEXT_PUBLIC_GA_MEASUREMENT_ID is configured for the production build, this website uses Google Analytics 4 (GA4) to understand page visits, referrers, device and broad geographic information, and a small number of website-level events: clicks on Request-a-demo CTAs, demo form submission, and clicks on contact-email links. GA4 sets cookies and reports to Google. We have configured GA4 to disable Google Signals and ad-personalization features; we do not enable Google Ads, remarketing, or cross-site personalization. You can limit this tracking by browser controls (incognito, Do-Not-Track), a content-blocking extension, or by opting out at https://tools.google.com/dlpage/gaoptout. If we have not configured GA4, no Google analytics scripts run. GA4 is administered by Google LLC and is subject to Google’s privacy terms at https://policies.google.com/privacy.

Plausible (aggregate, cookieless) may also be enabled separately when NEXT_PUBLIC_PLAUSIBLE_DOMAIN is configured. Both may run together if both environment variables are set.

Visitors can limit or block either analytics path through browser controls, Do-Not-Track or Global Privacy Control signals, or browser privacy extensions such as uBlock Origin or Privacy Badger. Disabling JavaScript prevents both analytics paths from loading.

Forms and lead capture

The website hosts two forms: a demo request at /demo and a general enquiry form at /contact. Both submit to our own API route, which validates the input server-side and dispatches transactional email via Azure Communication Services. Cloudflare Turnstile guards both forms to mitigate automated abuse and sets no tracking cookies. We collect the fields you fill in: name, work email, organization, role (optional on the contact form) and the message text you write. We use this information solely to respond to your enquiry. Submissions are delivered to an internal mailbox at orbitGRC, and a confirmation copy is sent to the address you provided; no third-party form host is involved. We retain submissions only as long as needed to reply and complete reasonable follow-up; no specific deletion timeline is promised on this page. To request access, correction or deletion of a submission, please use the contact page.

Updates

This notice may be updated from time to time. The latest version always lives at this URL.

See also our security posture and DPDP notice. Questions about this notice can be sent through the contact page.