Privacy Policy

Who we are

Orbifs is operated by Archi Systems AS (org. no. 916 683 332), registered at Gustav Vigelands Vei 36, Oslo, Norway. For personal data processed about you as a visitor or account holder, Archi Systems AS is the data controller. For the project files you store in Orbifs, you are the controller and we act as your processor — that relationship is governed by our Data Processing Agreement.

What data we collect

• Account data — name, work email, company, and role, when you create an account or request a pilot.
• Billing data — company billing details processed through our EU payment provider. We do not store full card numbers.
• Support data — the content of messages you send us and the context needed to help.
• Project files — the files you place in Orbifs. We treat these as your data and access them only as needed to run the service or at your instruction.

How we use it

We use personal data to provide and secure the service, set up and run pilots, handle billing, respond to support, and meet legal obligations. We do not sell personal data, and we do not profile visitors for advertising.

Legal bases (GDPR Art. 6)

• Contract — to provide the service and pilots you ask for.
• Legitimate interests — to secure, maintain and improve the service, balanced against your rights.
• Legal obligation — for accounting, tax and similar duties.
• Consent — where you give it, for example when you submit a form agreeing we may use your details to reply.

Cookies & analytics

The Orbifs marketing site sets no cookies and runs no analytics or third-party tracking. We don’t profile visitors. When you sign in to the application at app.orbifs.eu, strictly necessary cookies are used there to keep you logged in; those are covered by the application’s own notice. If we ever add analytics, we will update this section and introduce any consent mechanism the law requires — not before.

Where data is processed

Personal data and project files are processed in the EU/EEA. Project files are hosted in France (EU). See our Data Residency & Sovereignty statement for the detail.

Sub-processors

We use a short, EU-based list of sub-processors to run the service — currently our European cloud provider (France) and Mollie (Netherlands) for billing. Support and transactional email runs on our own servers in Stavanger, Norway (EEA), not a third party. The current list — with purpose, location and data handled — is published at Sub-processors, and we notify customers of material changes.

Retention

We keep personal data only as long as needed for the purpose it was collected, or as the law requires. Account data is kept for the life of the account; billing records are kept for the statutory period. Project-file retention follows your plan and your instructions.

Your rights

Under the GDPR you can request access, correction, erasure, restriction, portability, and object to certain processing. You can also lodge a complaint with a supervisory authority — in Norway, the Datatilsynet. To exercise any right, email support@orbifs.eu, which is also our route for all data-protection questions. We have not appointed a statutory Data Protection Officer; where one becomes required, we will name them here.

International transfers

We process personal data within the EU/EEA. We do not transfer customer project data outside the EEA. If any operational vendor were ever located outside the EEA, we would document and assess a valid transfer mechanism (such as Standard Contractual Clauses) before use.

Changes to this policy

This policy is versioned and dated. When it changes materially, we update the version line above and, where appropriate, notify account holders.