Privacy Policy

This Privacy Policy explains how PT Ifabula Digital Kreasi (“Orbis”, “we”, “us”) collects, uses, and protects information when you use the Orbis platform (the “Service”). It applies to internal users and client-portal users. If you access Orbis through your organization, your organization’s own policies may also apply.

1. Information we collect

• Account information — name, email address, profile photo, role, and organization, provided by you or your administrator.
• Sign-in data — when you sign in with Google, we receive your basic Google profile (name, email, and profile picture) via OAuth. We do not receive your Google password.
• Content you submit — projects, tasks, tickets, comments, documents, attachments, and other content you create or upload in the Service.
• Usage and device data — log data such as actions taken, timestamps, IP address, browser, and device information, used for security and to operate the Service.
• Cookies — we use strictly necessary cookies to keep you signed in and to secure the Service.

2. How we use information

• to provide, maintain, and improve the Service;
• to authenticate you and secure accounts and data;
• to enable collaboration features such as assignments, mentions, and notifications;
• to provide support and respond to your requests;
• to monitor for, prevent, and investigate fraud, abuse, and security incidents; and
• to comply with legal obligations.

3. Legal bases

Where applicable law (such as the GDPR) requires it, we process personal data on the bases of performance of a contract, our legitimate interests in operating and securing the Service, your consent, and compliance with legal obligations.

4. How we share information

We do not sell your personal data. We share information only:

• within your organization, according to roles and permissions you and your administrators configure;
• with service providers who process data on our behalf (for example, cloud hosting, storage, email delivery, and authentication), under appropriate confidentiality and data-protection obligations;
• when required by law, legal process, or to protect rights, safety, and security; and
• in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods may be governed by your organization’s agreement with us.

6. Security

We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and role-based permissions. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to certain processing, and to data portability. Because your data is often controlled by your organization, please direct requests to your administrator, or contact us and we will assist as required by law.

8. Third-party services

The Service relies on third parties such as Google (for Sign-In) and cloud hosting and storage providers. Their handling of data is governed by their own privacy policies. We encourage you to review Google’s Privacy Policy for information about how Google processes data during sign-in.

9. International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers of personal data.

10. Children’s privacy

The Service is intended for use by organizations and their authorized users. It is not directed to children, and we do not knowingly collect personal data from children.

11. Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact

Questions or requests regarding this Policy? Contact us at privacy@ifabula.com.