Privacy Policy

1. What we collect

• Account details: your email address and password, which our sign-in provider handles so we never see it, and the name and profile photo you choose to add.
• Your content: your prompts, the pictures and files you upload, everything you generate, and the projects and settings you create.
• Payments: the amount, date and status of each payment, and your balance history. Your card is handled by Stripe; we never receive your full card number.
• Usage: what you generate, with which model and settings, what it cost and when; which parts of Orbis you open, and the country (from your IP address) and kind of device (phone, tablet or computer) you use it from.
• How you found us: the website, campaign link or ad that first brought you to Orbis, if any.
• Technical information: IP address, browser and device details, and error reports, which our servers record to keep Orbis running and secure.
• Ad clicks: if you reach Orbis by clicking one of our ads on Facebook or Instagram, the click code Meta adds to the link.
• Messages you send us.

2. Cookies

Orbis uses cookies to keep you signed in and to finish setting up an invited account. Two more are set only when you arrive through a particular link:

• An affiliate’s link remembers which link you opened for 30 days, so that person gets credit if you make an account.
• One of our ads on Facebook or Instagram remembers the ad’s click code for 7 days, so that if you make an account we can tell Meta the ad worked (see sections 3 and 4).
• Another website or a campaign link is remembered for 30 days, so that if you make an account we know how you found us. This one stays with us.

We don’t run Meta’s or anyone else’s tracking code on Orbis, and we don’t use third-party analytics.

3. How we use it

• To run Orbis: sign you in, make what you ask for, keep your library, and manage your balance and payments.
• To keep Orbis safe: check prompts automatically against our rules, prevent fraud and abuse, and enforce limits.
• To contact you about your account: receipts, password resets, reminders before files are deleted, and important changes.
• To improve Orbis: we count which parts of Orbis people use, from which countries and devices, and how they found us, so we know what to fix and what to build next. These counts stay with us; they are never shared or used for ads.
• To send you news and offers about Orbis by email. Every one of these emails has a link to stop them, and stopping them never affects your account emails.
• To meet our legal, tax and accounting duties.
• To measure our ads: when you make an account after clicking one of our ads on Facebook or Instagram, we tell Meta, so it can see which ads work and show them to people like you.

We do not sell your personal information, and we do not use your content to train AI models. The sign-up report to Meta above is the only way we use your information for advertising, and nothing you make or upload is ever part of it.

4. Who we share it with

We share information only with the companies that help run Orbis, and only what each one needs:

• BytePlus (ModelArk), which makes Seedance videos and Seedream images, receives your prompts and any pictures you add. When you edit one of your videos with Seedance 2.5 Edit, it also receives that video.
• OpenAI, which checks prompts and pictures against our rules and makes images with GPT Image, receives your prompts, the text you want spoken and any pictures you add. For GPT Image it also receives a coded label for your account, never your name or email.
• Google, which makes Nano Banana images, Veo and Gemini Omni videos and Gemini voices, receives your prompts and the text you want spoken.
• xAI, which makes Grok Imagine images, receives your prompts.
• Krea, which makes Krea images, receives your prompts.
• fal.ai, which we use for Kling, MiniMax and Wan videos, receives your prompts. When you use one of your videos in Kling Omni Edit or Wan Animate, it also receives that video and any pictures you add. fal passes Kling and MiniMax requests on to the companies that make those models, Kuaishou and MiniMax.
• Higgsfield, which makes Clonejutsu videos, receives your prompts, the video you edit and the pictures you add.
• ElevenLabs, which makes voices, sound effects and music, and changes, cleans up and transcribes recordings, receives the text you want spoken, your descriptions of sounds and music, and any recording you upload or make for those tools.
• Stripe processes payments.
• Supabase handles sign-in, stores our database and keeps backup copies of your files.
• Cloudflare stores your files.
• Vercel hosts the Orbis website.
• Resend sends our emails.
• Meta (Facebook and Instagram), only when you make an account after clicking one of our ads there, receives the ad’s click code, the time you signed up, your IP address and browser details, and your email address and account number in scrambled (hashed) form. Meta uses this to measure our ads and choose who sees them, under its own privacy policy.

If you connect Claude (by Anthropic) to your account, Claude can see your prompts, library, projects and storyboards, and make things paid from your balance, until you disconnect it in Settings. What you share in Claude is covered by Anthropic’s own terms and privacy policy.

We’ll update this list when we add a service, such as a new AI provider. We may also share information when the law requires it, to protect people’s safety or our rights (for example, reporting child sexual abuse material to the authorities), or with a buyer if Orbis is sold, who must keep to this policy.

5. Where your information is stored

Our service providers store and process information outside Canada, including in the United States and Southeast Asia. Information held in another country may be available to that country’s authorities under its laws.

6. How long we keep it

• Your library files: until you delete them or close your account, or until you have gone 3 months without using Orbis. We email a reminder before deleting them.
• Account details: while your account is open.
• Payment and balance records: as long as tax and accounting law requires, usually 6 years.
• Server logs: a few weeks at most.
• Ad click code: in your browser for 7 days, or until you make an account.
• Usage counts and how you found us: while your account is open.

Deleted information can remain in our backups for up to 30 days before it is erased.

7. How we protect it

Information travels over encrypted connections. Your files are private: only you can open them, through links that expire after a short time. When you edit a video, the company making the edit also gets a link to that video and any pictures you added, which stops working after 2 hours. Access to our systems is limited to the people who run Orbis. No system is perfectly secure; if a breach puts your information at risk, we’ll tell you and the authorities as the law requires.

8. Your rights

You can ask to see the personal information we hold about you, correct it, get a copy of it, or have it deleted, by emailing team@orbismedia.ca. You don’t need to give a reason, and we’ll answer within 30 days.

To stop our news and offers, use the link at the bottom of any of those emails, or email us.

To keep your sign-up from being reported to Meta, turn on Global Privacy Control in your browser: Orbis then neither keeps the ad’s click code nor tells Meta. You can also choose which ads Meta shows you in your Facebook or Instagram settings.

People in Canada have rights under PIPEDA (and in Quebec, Law 25), people in the European Union and the United Kingdom under the GDPR, and people in California under the CCPA. We give everyone the same rights, wherever they live. If you’re unhappy with how we handle your information, you can complain to the Office of the Privacy Commissioner of Canada or your local privacy authority.

9. Children

Orbis is for adults 18 and over. We don’t knowingly collect information from anyone younger, and if we learn we have, we delete it.

10. Changes

We’ll post any update on this page with its date, and email you before important changes take effect.

11. Contact

Our privacy officer can be reached at team@orbismedia.ca. Orbis Marketing Inc., Toronto, Ontario, Canada.