Legal — Privacy
Privacy Policy.
How we collect, use, and protect your information. We keep it plain: we ask for what a project needs, we don't sell it, and you can ask us to delete it.
Effective July 9, 2026 · Last updated July 9, 2026
How we collect, use, and protect your information. We keep it plain: we ask for what a project needs, we don't sell it, and you can ask us to delete it.
Effective July 9, 2026 · Last updated July 9, 2026
ORBT Labs is an independent, owner-operated web and software studio based in San Diego, California. ORBT Labs is a trade name (DBA) of KERNL LLC. In this policy, "ORBT Labs," "we," "us," and "our" mean KERNL LLC doing business as ORBT Labs.
This policy explains what information we collect through orbtlabs.com, why we collect it, who we share it with, and the rights you have — including your rights under the California Consumer Privacy Act (CCPA/CPRA) and the California Online Privacy Protection Act (CalOPPA). If you have any question about it, email hello@orbtlabs.com.
We only collect information for a specific, stated purpose. We do not ask for more than a task needs.
When you send a brief or message through our contact form, we collect the name, email address, and project details you provide. We use these to reply to you, understand your project, and follow up about working together. An automated step categorizes each enquiry (for example, real project vs. spam) so we can respond appropriately.
If we send you an engagement agreement to sign, our e-signing flow records the information needed to make that signature valid and to prove what was agreed: your name and email, your typed signature and any drawn signature you add, the acknowledgments you check, the agreement text and version, the date and time of signing, and the IP address the signature was submitted from. IP logging on a signed contract is a standard, intentional part of the audit trail — it helps establish who signed and when.
Our free tools (the AI-citation audit and the brief generator) process the input you submit — such as a website URL, page content, or a short project description — to generate a result. That input is sent to an AI model to produce your output (see Sub-processors below). We use it to run the tool; we don't require an account to use them.
When a project deposit or payment is due, checkout is handled by our payment processor (Stripe). Your card details are entered on Stripe's secure checkout and are never seen or stored by us. We receive confirmation that a payment succeeded, along with the associated contact and amount.
Like almost every website, our hosting provider automatically records basic technical information for security and reliability — such as IP address, browser/user-agent, and timestamps of requests. This is standard operational logging.
We use cookieless analytics and performance monitoring to understand aggregate traffic — for example, which pages are viewed, the rough region (country) visitors arrive from, device type, the referring site, and basic page-load performance (Core Web Vitals). This is measured in aggregate to help us improve the site; it sets no cookies, does not follow you across other websites, and is not used to identify you.
We do not use your information for third-party advertising, and we do not build advertising profiles.
We do not sell your personal information, and we have not sold it in the preceding 12 months. We also do not "share" it for cross-context behavioral advertising as those terms are defined under California law. We do not trade, rent, or exchange your information for money or other value.
We use a small number of trusted third-party providers to operate the site and deliver our services. They process information only to perform their function for us, under their own privacy and security terms:
We may also disclose information if required by law, to enforce our agreements, or to protect the rights, safety, and security of our clients, our studio, or the public.
We use privacy-first, cookieless analytics (Vercel Web Analytics) to count page views and understand which pages are visited and where visitors arrive from. It sets no cookies, does not track you across other websites, and does not collect personal information — which is why this site shows no cookie-consent banner.
We do not use third-party advertising or ad-tracking cookies or pixels, and there are no cross-site trackers on this site. Aside from analytics, we use only functional storage needed for the site to work — for example, a secure session for our own admin area, and local storage used by internal studio tools. This functional storage isn't used to track you across other websites.
We keep information only as long as it's needed for the purpose it was collected, or as required by law. Enquiries and brief details are kept while we're in contact and for a reasonable period afterward. Signed agreements and their audit records are kept for the life of the engagement and for the period we're required or advised to retain business and legal records. Free-tool input is used to generate your result and is not retained for marketing. You can ask us to delete information sooner (see your rights below).
If you're a California resident, the CCPA/CPRA gives you the right to:
To exercise any of these rights, email hello@orbtlabs.com with your request. We'll take reasonable steps to verify your identity (usually by confirming you control the email on file) and respond within the timeframes the law requires. You may use an authorized agent to make a request on your behalf.
Because we don't track you across other websites or serve third-party ads, we don't change our practices based on "Do Not Track" browser signals — there's no cross-site tracking here to disable.
This site and our services are intended for businesses and adults. They are not directed at children under 13, and we don't knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll delete it.
We use reputable infrastructure providers, transport encryption (HTTPS), access controls, and rate-limiting to protect information. No method of transmission or storage is ever perfectly secure, but we take reasonable, industry-standard measures appropriate to a small studio.
We may update this policy as our practices or the law change. When we do, we'll revise the "last updated" date at the top. Material changes will be reflected on this page.
Questions, requests, or concerns about privacy? Email hello@orbtlabs.com. We're an owner-operated studio in San Diego, California, and a person — not a ticket queue — will read it.