Privacy Policy

Personal data (hereinafter referred to as "data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly platform, including its content and the services offered there. According to Article 4(1) of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), "processing" means any operation or set of operations performed on personal data, such as collection, recording, organization, structuring, storage, alteration, retrieval, use, disclosure, erasure, or destruction.

The following privacy policy informs you about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we decide either alone or together with others on the purposes and means of processing. We also provide information about the third-party components we use to optimize and improve user experience.

The controller of this website under data protection law is:

Webentertainer GmbH
Lange Gasse 90
4052 Basel, Switzerland
Phone: +41 61 511 22 13
Email: support@webentertainer.ch

The provider's data protection officer is Julian Vorraro.

With respect to the data processing described below, users and data subjects have the following rights:

• The right to confirmation of whether data concerning them is being processed, and the right to access their processed data (Art. 15 GDPR).
• The right to rectification or completion of incorrect or incomplete data (Art. 16 GDPR).
• The right to immediate erasure of data concerning them (Art. 17 GDPR), or, if applicable, to restrict processing (Art. 18 GDPR).
• The right to receive their data and transmit it to other providers/controllers (Art. 20 GDPR).
• The right to lodge a complaint with the supervisory authority (Art. 77 GDPR).
• The right to object to future processing of their data (Art. 21 GDPR), particularly for direct advertising.

Your data processed while using our platform will be deleted or blocked as soon as the purpose of storage no longer applies, unless statutory retention requirements apply.

1. Server Data

For technical reasons, data such as your Internet browser type and version, operating system, the website from which you arrived at our website (referrer URL), the pages visited on our website, date and time of access, and your IP address are transmitted by your browser to us or our hosting provider and recorded in server log files. This processing is based on Art. 6(1)(f) GDPR, with our legitimate interest being the stability, security, and functionality of our platform.

2. Use of AWS and Vercel

We use Amazon Web Services (AWS) for a wide range of services across multiple regions, including regions within the European Union, Switzerland, and some global regions. We also use Vercel for hosting Orbitype to ensure optimal performance and scalability. The legal basis for the data processing involved is Art. 6(1)(f) GDPR, representing our legitimate interest in efficient and secure infrastructure.

3. Cookies and Tracking Tools

We use cookies to make our platform more user-friendly, efficient, and secure. These include session cookies that are deleted after you close your browser (Art. 6(1)(b) GDPR) and cookies from third-party services (Art. 6(1)(f) GDPR).

Additionally, we use the following services for tracking and improving our offerings:

• Smartlook for qualitative tracking.
• Google Tag Manager for managing tags and tracking scripts.
• Google Analytics 4 for website analytics.
• Google Ads, Meta Ads, LinkedIn Ads, X.com Ads, and Reddit Ads for advertising purposes.

The legal basis for the use of these tracking and advertising services is Art. 6(1)(f) GDPR, representing our legitimate interest in understanding user behavior, optimizing our offerings, and providing personalized advertisements.

4. Contract Processing

When you provide data to make use of our services, we process this data to fulfill contractual obligations. The legal basis is Art. 6(1)(b) GDPR. We delete this data once the contract is fully processed and statutory retention obligations do not conflict.

5. Customer Account

When creating a customer account, we collect and store your data for the fulfillment of the contract and for customer care purposes. The processing of this data is based on your consent (Art. 6(1)(a) GDPR) or the contract initiation/fulfillment (Art. 6(1)(b) GDPR).

6. Contact Requests

When contacting us, the data you provide is used to respond to your inquiry. This processing is necessary to respond to your request (Art. 6(1)(b) GDPR). The data is deleted once it is no longer required, subject to statutory retention requirements.

7. Newsletter

If you register, you subscribe to our newsletter. We collect your email address and optionally your name to provide this service. This data is processed based on your consent (Art. 6(1)(a) GDPR), which can be revoked at any time.

8. Third-Party Integrations

We use Google Maps, YouTube, Vimeo, OpenStreetMap, LiveChat, Sendfox, Saleshandy, and other services as part of our platform. These services may collect personal data as described in their respective privacy policies. Our legitimate interest (Art. 6(1)(f) GDPR) is to provide enhanced functionality to our users.

9. Advertising Services

We use Google and Meta Pixel and other advertising services to analyze the use of our website and optimize our advertising efforts. This allows us to display relevant ads to users who are interested in our services. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

This section discloses how Orbitype (operated by Webentertainer GmbH) accesses, uses, stores, and shares Google user data. It is intended to satisfy the Google API Services User Data Policy and Google API Services User Data Policy Limited Use requirements for Google Cloud project verification.

Orbitype interacts with Google user data in two distinct ways:

• A. Website Google tags on www.orbitype.com (measurement and advertising).
• B. Google account / Google API access when a user signs in with Google or connects a Google account to Orbitype for product features.

1. Data Accessed

A. Website Google tags (orbitype.com)

Through Google Tag Manager, Google Analytics 4, Google Ads, and related Google tags, we may process:

• Page views, events, session and engagement metrics
• Device, browser, and approximate location information derived from IP address
• Referrer/UTM campaign data and conversion/remarketing events
• Pseudonymous identifiers set by Google tags (for example cookie or client IDs), subject to your cookie consent choices

Embedded Google content on the website (for example YouTube or Google Maps, where used) may also cause Google to receive request data such as IP address and page URL according to Google's own terms.

B. Google account and Google API data (Orbitype application)

When you authenticate with Google or authorize an Orbitype Google connection, Orbitype accesses only the Google user data covered by the OAuth scopes shown on Google's consent screen and approved by you. Depending on the connection you enable, this may include:

• Basic account profile: Google account email address, name, and profile image (typically via openid, email, and/or profile scopes) for sign-in, account linking, and identity.
• Gmail data (only if you connect Gmail): message metadata and/or content, labels, drafts, and send/actions required to run outreach, inbox, or automation workflows you configure.
• Google Calendar data (only if you connect Calendar): calendar lists, event details, and related metadata required for scheduling or workflow automation you configure.
• Google Contacts / People data (only if you connect Contacts): names, email addresses, and related contact fields required for CRM/GTM workflows you configure.
• Google Drive / Docs / Sheets data (only if you connect those services): files, documents, or spreadsheet content/metadata that you select or that a workflow you configure reads/writes.
• Google advertising or analytics account data (only if you connect those Google products): account, campaign, or reporting data needed for the connected feature.

Orbitype does not request Google scopes that are not needed for a feature you choose to use. Exact scopes are always displayed by Google at authorization time and can be revoked in your Google Account under Third-party access.

2. Data Usage

Orbitype uses Google user data only to:

• Authenticate and identify users (Google Sign-In / account linking).
• Provide user-facing Orbitype features you request, including agentic workflows, GTM/CRM operations, content operations, scheduling, reporting, and automations that you configure to use a connected Google account.
• Operate and improve those features (for example syncing, displaying, transforming, or writing back data as instructed by your workflows).
• Measure and market our own website/product using Google Analytics, Google Tag Manager, and Google Ads on orbitype.com (website tags only; not restricted Google Workspace data obtained via restricted OAuth scopes).
• Provide support and security related to authentication, connected integrations, abuse prevention, and troubleshooting.

Orbitype does not:

• Sell Google user data
• Use Google user data obtained via restricted scopes for serving advertisements
• Use Google user data for creditworthiness or lending decisions
• Allow independent use of Google user data by unrelated third parties

3. Data Storage

Google user data accessed through Orbitype is stored only as needed to provide the authorized feature, maintain your workspace, provide support/security, and meet legal obligations. Storage may occur on infrastructure providers used by Orbitype (including AWS and Vercel) under contractual data-processing controls. OAuth tokens are stored securely and used to access Google APIs on your behalf. When you disconnect a Google integration or delete your Orbitype account, associated Google user data and tokens are deleted or anonymized within a reasonable period, subject to legal retention requirements and backup cycles.

4. Data Sharing / Transfer

Orbitype shares Google user data only:

• With subprocessors that host or operate the Service (for example cloud infrastructure), bound by confidentiality and data-processing obligations
• When you explicitly instruct Orbitype to send data to another connected system as part of a workflow you configure
• When required by law, or to protect the rights, safety, and security of Orbitype, our users, or the public

Humans at Orbitype do not read Google user data unless: (a) you give affirmative consent for specific messages/files (for example support); (b) it is necessary for security, abuse/fraud investigation, or legal compliance; or (c) the data is aggregated and no longer identifies a user or Google account.

5. Limited Use Commitment

Orbitype's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Your Controls

• Disconnect Google integrations in Orbitype settings
• Revoke Orbitype access in your Google Account permissions
• Manage website cookie/Google tag consent via our cookie banner where applicable
• Contact support@webentertainer.ch for access, correction, or deletion requests

We take appropriate technical and organizational measures to ensure data security, in accordance with Art. 32 GDPR, to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access.

For any questions or requests regarding data privacy, please contact our data protection officer at support@webentertainer.ch.