Privacy Policy
How we collect, use, share, and protect your information, in plain language.
Last updated: July 13, 2026
The short version
We collect what you give us (like your email and business details when you try orbt or book a demo), what your browser sends automatically (like analytics and log data), and public information about brands we are asked to research. We use it to run and improve our services, and we process some of it with AI systems that a human reviews. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. You can reach us any time at contact@tryorbt.com. The rest of this page is the detail.
1. Who we are
The data controller for the services described here is ORBT KOREA, Inc.(주식회사 오르빗코리아), a corporation registered in the Republic of Korea (business registration no. 772-86-03334, corporate registration no. 110111-0928328), with its registered office at Startup Studio No. 8, 13 Gaeunsa 1-gil, Seongbuk-gu, Seoul, Republic of Korea (“orbt”, “we”, “us”).
Our privacy officer under Korean law is our CEO, Joshua (Minsoo) Kim. For any privacy question or request, email contact@tryorbt.comwith “Privacy” in the subject line.
2. What this policy covers
This policy covers tryorbt.com and its subdomains, the orbt trial application, our research and strategy services, and our communications with you. Paid client engagements are additionally governed by the signed agreement for that engagement; if that agreement says something different about data, the agreement wins for that engagement.
3. Information we collect
Information you give us
- Contact and booking details. When you email us or book a demo (through Cal.com), we receive your name, email address, and anything you choose to include, such as your company name and what you want to discuss.
- Trial and account information. When you use the orbt trial, we collect your email address (we use passwordless magic-link sign-in), and, as the product develops, your name and business information you provide: your brand name, website, category, markets, goals, and other context you choose to share so we can research your brand. Providing this is your choice, but without it we cannot generate your report.
- Correspondence. Emails, feedback, and messages you send us, including through Slack channels we share with your team during an engagement.
- Job applications. If you apply to work with us, the information in your application.
Information collected automatically
- Usage and device data. IP address, browser type, device information, pages visited, referring page, and timestamps, collected through server logs and the analytics services described in section 10.
- Approximate location. Derived from your IP address (country or city level, never precise location).
Information from other sources
- Public information about brands. Our core service is market research. When you ask us to research a brand, we collect publicly available information about it: websites, social media content, marketplaces, filings, news, and reviews. This can include personal information that appears in public sources, such as the names of founders or executives. We use it only to produce the research.
We do not knowingly collect special categories of personal data (such as health or biometric data) and ask that you not submit them.
4. How we use your information, and our legal bases
Where the GDPR or similar laws apply, we rely on the legal bases below. Where Korean law (the Personal Information Protection Act) applies, we process personal information within the scope you have consented to or as permitted by law.
| Purpose | Examples | Legal basis (GDPR) |
|---|---|---|
| Provide the services | Generate your trial report, deliver research and recommendations, operate your account, respond to you | Contract, or steps you request before a contract (Art. 6(1)(b)) |
| Improve and secure the services | Analytics, debugging, preventing abuse and fraud, rate limiting | Legitimate interests (Art. 6(1)(f)): running a safe, working product |
| Communicate about orbt | Replies, service updates, and, with your permission, marketing emails (opt out any time) | Consent (Art. 6(1)(a)) for marketing; legitimate interests for service messages |
| Research brands | Collecting and analyzing public market information, including incidental personal data in public sources | Legitimate interests (Art. 6(1)(f)): producing the research our clients request |
| Comply with law | Tax and accounting records, responding to lawful requests | Legal obligation (Art. 6(1)(c)), including Korean commercial and tax law |
5. How we use AI
orbt is an AI research product. Information you provide about your brand, together with public market data, is processed by large language models from providers such as OpenAI, Anthropic, and Google to produce research and recommendations. Three commitments on this:
- Our AI providers process this data under business terms that do not permit them to use it to train their models.
- A human strategist reviews client-facing recommendations before delivery. We do not make decisions about you that have legal or similarly significant effects by automated means alone.
- AI output can be wrong. Our outputs cite their sources so you can verify them, and we mark what we could not verify.
6. Who receives your information
We share personal information only with:
- Service providers that process it on our instructions: hosting and content delivery (Vercel, Cloudflare), scheduling (Cal.com), analytics (Google Analytics, Vercel Analytics, and Microsoft services), email and productivity tools, communication tools we use with you (such as Slack), AI providers (OpenAI, Anthropic, Google), and payment processors if you purchase from us.
- Professional advisers (lawyers, accountants, auditors) where needed.
- Authorities where the law requires it.
- A successor if we go through a merger, acquisition, or asset sale; this policy would continue to apply to your information.
We do not sell personal information, and we do not share it with third parties for their own advertising.
7. International transfers
We are based in the Republic of Korea and use service providers in the United States and elsewhere, so your information may be processed outside your country. For visitors from the European Economic Area: the European Commission has recognized the Republic of Korea as providing an adequate level of data protection. For transfers to the United States and other countries, we rely on the EU-U.S. Data Privacy Framework where the recipient is certified, or on Standard Contractual Clauses or another lawful transfer mechanism.
8. How long we keep it
- Trial and account data: while your account is active, then deleted or anonymized within 12 months of your last activity, unless you ask us to delete it sooner.
- Correspondence: up to 3 years after our last exchange.
- Contract, billing, and tax records: up to 5 years, as required by Korean commercial and tax law.
- Server logs: up to 12 months.
- Analytics data: up to 26 months.
When a retention period ends, we delete or irreversibly anonymize the data.
9. Your rights
Right to object. Where we process your personal data based on legitimate interests, you have the right to object at any time, for reasons arising from your particular situation. If you object to processing for direct marketing, we will stop, no questions asked. Email contact@tryorbt.com.
Depending on where you live, you also have the right to:
- access the personal information we hold about you, and receive a copy in a portable format;
- correct inaccurate information;
- delete your information;
- restrict certain processing;
- withdraw consent at any time, without affecting processing that happened before you withdrew it;
- complain to a supervisory authority: your local data protection authority in the EEA, the Information Commissioner’s Office in the UK, or the Personal Information Protection Commission in Korea.
For US state residents (including California): you have rights to know, access, correct, and delete personal information, and the right not to be discriminated against for exercising them. We do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of on that front.
To exercise any right, email contact@tryorbt.com. We may need to verify your identity, and we respond within 30 days or the shorter period your local law requires. We will not charge you for a reasonable request.
10. Cookies and analytics
We keep tracking minimal. We use cookies and similar technologies for two things: making the site work (essential), and understanding how it is used so we can improve it (analytics, including Google Analytics, Vercel Analytics, and Microsoft services). We do not use advertising cookies or tracking pixels from ad networks.
Where the law requires it, including in the EEA and UK, we ask for your consent before setting non-essential cookies, and you can change your mind at any time. You can also control cookies through your browser settings, and Google offers an opt-out browser add-on for Google Analytics.
11. Security
We protect your information with encryption in transit (TLS), passwordless magic-link sign-in for the trial (no passwords to leak), tenant isolation so one client’s data is never visible to another, rate limiting, and access controls inside the team. No system is perfectly secure; if a breach ever affects your personal information, we will notify you and the relevant authorities as the law requires.
12. Children
Our services are for businesses and are not directed to anyone under 16. We do not knowingly collect personal information from children; if you believe a child has provided us information, email us and we will delete it.
13. Changes to this policy
When we change this policy, we will post the new version here and update the date at the top. If a change meaningfully affects your rights, we will tell you more directly, such as by email or a notice on the site.
14. Contact
ORBT KOREA, Inc. (주식회사 오르빗코리아)
Startup Studio No. 8, 13 Gaeunsa 1-gil, Seongbuk-gu, Seoul, Republic of Korea
contact@tryorbt.com
See also our Terms and Conditions and Disclaimer.