OrbiBrandPrivacy policy
In force since 10/24/2026
Data controller
RAHOUBI LIMITED (company number 13732051), 7 Coronation Dephna House, London, NW10 7PQ, United Kingdom. Contact for your data: support@orbibrand.com.
Data processed and purposes
- Account: name, email address, language, hashed password, sign-in history — to provide the service (performance of contract).
- Projects: briefs, generated names, favourites, team notes and comments — to provide the service.
- Payment: Stripe customer identifiers, invoices, country, VAT number if any — to bill you and meet accounting obligations. We never see your card details.
- Support: your messages and attachments — to answer you.
- Technical: IP address, security logs — to protect the service against abuse (legitimate interest).
- Partners: if you arrive through a partner link and accept it, the partner identifier — to calculate their commission (consent).
Artificial intelligence
To generate your names, your brief (business description, audience, preferences) is sent to our AI providers, without your name or email address. Under their terms for business APIs, these providers do not use this data to train their models. Avoid putting personal information in a brief.
Retention periods
- Account and projects: as long as the account exists; after a deletion request, a 14-day grace period lets you cancel, then the data is erased.
- Invoices: the period required by UK accounting law (at least 6 years).
- Technical logs: 30 days; sent emails: 12 months.
- Consent to communications: until withdrawn.
Providers (processors)
| Provider | Role | Data | Location |
|---|---|---|---|
| Render Services, Inc. | Application and database hosting | All service data | European Union (Frankfurt) |
| Cloudflare, Inc. | DNS, protection, image storage (R2) | IP addresses, published images | Global network |
| Stripe Payments UK, Ltd | Payments, invoices, subscriptions | Billing identity, payment | United Kingdom / global |
| Resend, Inc. | Email delivery | Email address, email content | European Union (Ireland) |
| OpenAI, L.L.C. | Name generation and review (primary) | Brief content | United States |
| Anthropic, PBC | Name generation and review (fallback) | Brief content | United States |
| Fastly, Inc. | Domain name availability checks | Candidate domain names only | United States |
| Google LLC | Sign in with Google (if you choose it) | Name, email address | United States |
When data is transferred outside the United Kingdom or the European Union, we rely on the safeguards provided by law (adequacy decisions or standard contractual clauses).
Your rights
You can access, export, correct or delete your data, object to some processing or withdraw your consent. Export and account deletion are available directly in your account (My account → Data); for anything else, write to support@orbibrand.com. You may also complain to a data protection authority: the ICO in the United Kingdom (ico.org.uk) or the authority of your EU country.
Security
Encrypted connections (HTTPS), database not publicly exposed, hashed passwords, mandatory two-factor authentication for our team, encrypted backups.
Cookies
See our cookie policy.