Privacy policy

Controller: Paolo Sodo, 93339 Riedenburg, Germany. Contact: hello@streamorbita.live.

No data protection officer has been appointed: the project is run by one person and does not fall under the mandatory appointment criteria.

Account: email address, hashed password, email confirmation status, sign-up date.

Profile: public name, handle, bio, website or social link you provide.

Creator applications: name, email, category, channel, audience size, message and rights confirmation.

Published content: title, description, cover image, external link, event date and publication status.

Contact requests: name, email, subject and message text.

Technical data: IP address, security logs, language preference and technical cookies.

Providing the account, public profile and content publishing: performance of a contract (Art. 6(1)(b) GDPR).

Answering messages and reviewing applications: pre-contractual steps and legitimate interest (Art. 6(1)(b) and (f)).

Security, abuse prevention and service continuity: legitimate interest (Art. 6(1)(f)).

Accounting and tax duties once invoicing starts: legal obligation (Art. 6(1)(c)).

Non-essential cookies and promotional messages: consent (Art. 6(1)(a)), withdrawable at any time.

Infrastructure, database and authentication: Supabase (EU hosting) and Lovable for application delivery.

Transactional email: the sending service connected to notify.streamorbita.live.

Payments: Stripe, which processes payment data as an independent controller under its own policy. Orbita never sees or stores card numbers.

All providers act as processors where required and are bound by contract.

Some providers may process data outside the European Economic Area. Such transfers rely on the European Commission's standard contractual clauses.

Account data: until you delete the account, then removed or anonymised within 30 days.

Contact messages and applications: up to 24 months after the last interaction.

Accounting records, once they exist: 10 years as required by German law.

Technical and security logs: up to 12 months.

If you are an approved creator, your public name, handle, bio, website and published content are visible to anyone.

Your email address is never shown publicly and is not accessible to other users.

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest.

Write to hello@streamorbita.live: we reply within one month. Most data can be edited directly in your dashboard.

You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You may lodge a complaint with a supervisory authority. For Bavaria: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach.

You can also contact the authority in your country of residence.

The service is not intended for children under 16. If we learn of an account belonging to someone under 16, we remove it.

Encrypted transmission (HTTPS), hashed passwords, per-user data isolation through row-level security rules, and admin access protected by a second passcode.

We will update this document when the activity is incorporated and whenever providers or purposes change. Material changes will be announced by email or on the site.