Privacy Policy
Last updated: 13 October 2026. Daje Inc (“Orbit Social”, “we”) operates orbitsocial.club and is the data fiduciary for the personal data described here, under India's Digital Personal Data Protection Act, 2023.
What we collect
- Details you give us in the vibe quiz: name, WhatsApp number, gender, age bracket, neighbourhood, preferred activities and social style, and a LinkedIn or Instagram profile link.
- Booking and payment records: what you bought, when, and payment/refund references. We never see or store your card, UPI or bank credentials.
- Post-event feedback and any safety reports you submit.
- Basic technical data needed to run the site securely, such as your IP address (for fraud prevention) and a login session cookie.
How we use it
- To verify your identity and keep gatherings safe — our curators review the profile link you provide.
- To match you with a small group with a balanced gender ratio, and to arrange venues.
- To send booking confirmations, your group reveal, reminders and feedback requests on WhatsApp. Reply STOP at any time to opt out of WhatsApp messages (updates remain available in My Orbit).
- To process payments and refunds and to meet legal, tax and accounting obligations.
Your gender is used only to balance groups and is never shown to other guests. Other guests see only your first name and a general description of your social style and interests.
How we store & protect your data
- Your data is stored in a managed database hosted by Supabase in India (Mumbai region). Data is encrypted in transit (HTTPS/TLS) and at rest.
- Access is restricted to a small number of authorised Orbit Social staff and curators who need it to run gatherings, protected by individual logins and role-based permissions. Database-level access rules ensure guests can only ever see their own records.
- Payments are processed by Razorpay, a PCI-DSS compliant payment gateway. Card, UPI and bank details are entered on Razorpay's secure checkout and never reach our servers.
- We use a session cookie only to keep you logged in to My Orbit. We do not use advertising or cross-site tracking cookies.
- We review access regularly and will notify affected users and the authorities as required by law if a personal data breach occurs.
Who we share it with
Only with service providers that process data on our behalf: Supabase (database and login), Razorpay (payments), Meta / WhatsApp (messaging) and Vercel (website hosting). Partner venues receive only the first names and number of guests for a reservation. We do not sell or rent personal data.
How long we keep it
We keep your profile while your account is active. When you delete your account from My Orbit, we erase your personal details and keep payment and transaction records only for as long as tax and accounting laws require.
Your rights
You can access, correct or erase your personal data and withdraw consent at any time — most of this is available in My Orbit, or you can write to us. Withdrawing consent may mean we can no longer arrange bookings for you.
Grievance Officer
For privacy questions or complaints, contact our Grievance Officer at Daje Inc: hello@orbitsocial.club. We aim to respond within 7 days.