Privacy Policy

Last updated: August 22, 2026

PT Orbit Solusi Indonesia ("Orbit," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our platform at orbitpaths.com and app.orbitpaths.com (the "Service"). This policy is prepared in accordance with Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP).

By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored in hashed form). If you manage multiple business entities, we store the entity names and details you provide.

Financial Data

When you upload bank statements, we process and store the transaction data extracted from those documents, including dates, amounts, descriptions, and counterparty names. The original uploaded files are stored securely for processing purposes.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, browser type, and device information.

2. How We Use Your Data

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Automatically categorize and organize your financial transactions using artificial intelligence
  • Generate financial reports (Income Statement, Balance Sheet, Cash Flow)
  • Provide AI-powered analysis and insights about your financial data
  • Communicate with you about your account, updates, and support
  • Ensure security and prevent fraud

3. AI Processing

Orbit uses third-party artificial intelligence services to categorize transactions and generate financial insights. When you upload a bank statement or request AI analysis, relevant transaction data is sent to our AI provider for processing. This data is used solely to deliver the Service and is not used by the AI provider to train their models. We select AI providers that maintain industry-standard security and data protection practices.

4. Data Sharing

We do not sell your personal data. We may share your data only in the following circumstances:

  • Service providers: Third-party providers that help us operate the Service (hosting, AI processing, analytics), bound by confidentiality obligations
  • Legal requirements: When required by Indonesian law, regulation, or legal process
  • Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to you
  • With your consent: When you explicitly authorize us to share specific data

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (TLS/SSL)
  • Hashed password storage
  • Access controls and authentication mechanisms
  • Regular security reviews

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, unless retention is required by law. Financial transaction data may be retained in anonymized form for service improvement purposes.

7. Your Rights

Under UU PDP, you have the right to:

  • Access and obtain a copy of your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your personal data
  • Withdraw consent for data processing
  • Object to processing of your personal data
  • Request restriction of data processing
  • Data portability — receive your data in a structured, commonly used format

To exercise any of these rights, contact us at hq@orbitpaths.com. We will respond within 3 x 24 hours as required by UU PDP.

8. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party advertising or tracking cookies.

9. Children's Privacy

The Service is not intended for individuals under the age of 17. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

PT Orbit Solusi Indonesia
Email: hq@orbitpaths.com