Privacy policy
This policy explains what we collect when you use Orbismm, why we need it and what you can ask us to do with it. We collect as little as we can to run the service.
Last updated 26 Sep 2026
1. What we collect
Account: your name, email address, password (stored only as a hash), language and, if you turn it on, your two-factor secret.
Security: the IP address and browser of each sign-in, so we can show your active sessions and warn you about new devices.
Orders and API: the links and quantities you order, your balance and ledger, API keys (stored hashed) and when they were last used.
Payments: invoice amounts, the coin and network you paid with and the payment status we receive from Cryptomus. We never see or store your wallet’s private keys.
Support: the messages you send us and our replies.
2. Why we use it
To run your account and deliver your orders, to keep your account secure, to credit payments, to answer you, and to meet legal duties such as keeping financial records. We don’t sell your data and we don’t use it for advertising.
3. Who processes it with us
Cryptomus processes crypto payments. Our hosting provider stores our servers and backups. Our email provider sends account and security emails. Google Analytics measures visits to our website (not the panel) so we know which pages help people; advertising features are switched off. Suppliers that deliver orders receive the link and quantity of an order, nothing about you.
4. How long we keep it
We keep account data while your account is open. Financial records such as ledger entries and payments are kept as long as the law requires. Sign-in records are kept for a limited time for security.
5. Legal bases
We process your data to perform our contract with you (running your account and orders), to meet legal duties (financial records), for our legitimate interests (security, preventing abuse, improving the service) and, where the law requires it, with your consent.
6. How we protect it
Passwords are stored only as hashes. Connections use HTTPS. API keys are shown once and stored hashed. Access to customer data is limited to the people who need it to run and support the service, and administrator actions are logged.
7. Where data is processed
Our providers may process data in countries other than yours. We choose providers that protect it appropriately and share with them only what they need to do their job.
8. Your rights
You can see and change your details in the panel. You can ask us for a copy of your data, to correct it or to delete your account; some records, such as payments, may need to be kept by law. Write to support.
10. Children
Orbismm is not for people under 18, and we do not knowingly collect data from them. If you think a child has an account, tell support and we will remove it.
11. Contact
For any question about your data, or to use your rights, write to support. We answer every request.
12. Changes
We will update this page when our practices change. The date at the top shows the latest version.