Last updated: September 6, 2026 (version 2026-09-06-r3)
This Privacy Policy describes how OrbitWorks collects, uses, stores, processes, shares, retains, and deletes personal information in connection with the OrbitWorks Service.
This Privacy Policy should be read together with our Terms and Conditions and Biometric Data Policy.
Depending on how a Customer configures and uses OrbitWorks, we may collect the following information.
We may collect administrator and supervisor names, email addresses, roles, authentication information, account settings, and related account information.
Customers may provide Employee information including:
We may collect job-site names, addresses, assignments, schedules, and related workforce information.
We may collect information associated with clock events, including:
If Customer enables location-based features, OrbitWorks may process precise or approximate device location, job-site location, geofence information, or location-verification results in connection with clock events. The specific location information collected depends on the features enabled by Customer.
OrbitWorks may process Employee profile photos and photos captured during enrollment, clock-in, clock-out, or verification workflows. Storage and retention of these photos may depend on the feature used and the retention settings described in this Policy or the Biometric Data Policy.
If Customer enables face verification, OrbitWorks may process biometric information as described in the Biometric Data Policy.
Payments are processed by Stripe. OrbitWorks may store Stripe customer identifiers, subscription identifiers, payment status, billing-plan information, and related transaction references. OrbitWorks does not store full payment card numbers.
We may collect technical information necessary to operate and secure the Service, including IP address, device information, browser or application information, authentication events, error logs, security events, and usage information.
OrbitWorks may use personal information to:
For information Customer submits about Employees, OrbitWorks generally processes that information to provide the Service according to Customer's configuration and instructions.
Customer determines which Employees are added, which features are enabled, which information is entered, and how workforce information is used for Customer's employment and business purposes.
Customer remains responsible for complying with laws applicable to its relationship with its Employees.
OrbitWorks may share information with service providers that assist us in operating the Service. These providers may include:
These providers process information only as necessary to provide services to OrbitWorks or as otherwise permitted by applicable law and their agreements with us.
We do not sell Employee personal information.
We do not share Employee personal information with unrelated third parties for their own advertising or marketing purposes.
We may also disclose information where reasonably necessary to comply with law, respond to lawful legal process, protect the rights or security of OrbitWorks or others, investigate fraud or misuse, or in connection with a merger, acquisition, financing, restructuring, or sale of all or part of OrbitWorks.
We retain personal information only for as long as reasonably necessary to provide the Service, satisfy legitimate business purposes, comply with legal obligations, resolve disputes, and enforce agreements.
Default retention may include:
Backup copies may remain for a limited period following deletion as part of routine disaster recovery and system backup processes before being automatically overwritten or deleted.
Customer is responsible for determining what workforce or employment records it is legally required to retain and should export required records before they are deleted from OrbitWorks.
Customers may be able to access, correct, export, or delete information through features available in the Service.
Employees should generally direct requests regarding information controlled by their employer to their employer.
Where appropriate, OrbitWorks will assist Customer with verified requests to access, correct, export, or delete personal information.
Certain information may be retained where required or permitted by law, including for fraud prevention, security, billing, legal compliance, or dispute resolution.
OrbitWorks uses reasonable administrative, technical, and organizational safeguards designed to protect personal information.
These safeguards may include encryption in transit, authentication controls, role-based permissions, access restrictions, tenant separation, monitoring, and security controls appropriate to the Service.
No internet-connected service or information-storage system can be guaranteed to be completely secure, and OrbitWorks cannot guarantee absolute security.
If OrbitWorks becomes aware of a security incident involving personal information, OrbitWorks will investigate the incident and take reasonable steps to contain, mitigate, and remediate it.
Where required by applicable law or contractual obligation, OrbitWorks will provide legally required notifications to affected Customers or other parties.
OrbitWorks is designed for workforce and business use and is not intended for use by children except where a Customer lawfully employs or otherwise manages a minor and is permitted to process the minor's information under applicable law.
Customer is responsible for complying with any additional legal requirements that apply to workers under the age of majority.
OrbitWorks and its service providers may process information in the United States and other locations where they operate.
Where legally required, appropriate safeguards will be used for international transfers of personal information.
If OrbitWorks is involved in a merger, acquisition, restructuring, financing, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to applicable law.
OrbitWorks may update this Privacy Policy from time to time.
Material changes will be reflected by an updated "Last updated" date and may also be communicated through the Service, by email, or through another reasonable method.
Questions, privacy requests, or concerns regarding this Privacy Policy may be submitted using the contact information provided on the OrbitWorks website.