When you use ScanOrbit for your business, you decide what personal data goes into it (you're the controller) and ScanOrbit processes it on your behalf (we're the processor). This page summarises how. To sign a Data Processing Agreement for your organization, email hello@scanorbit.app.
1. What we process
Personal data you or your team put into ScanOrbit: team members' names and emails; business card details; contacts and form responses collected through your QR codes; and scan analytics (device, browser, approximate location) about people who scan your codes.
2. What we'll do with it
Only process it to provide ScanOrbit to you and on your instructions, which are your use and configuration of the product. We don't sell it or use it for advertising.
3. Subprocessors and transfers
We use the subprocessors listed on our Subprocessors page and will update that page before adding a new one. Data is stored in the United States, and some providers are in the EU and India; for transfers out of the EU and UK we rely on the standard contractual safeguards our providers offer.
4. Security
The measures we take are described on our Security page: encryption in transit and at rest, server-enforced two-factor authentication and roles, an audit log of account changes, and hashed, scoped API keys.
5. Your requests and deletion
You can export or delete your data yourself at any time from Settings → Security → Your data. We'll help you respond to requests from people whose data you hold.
When your account is deleted, its data is deleted immediately, apart from invoices and payment records that the law requires us to keep.
6. If something goes wrong
If we become aware of a personal data breach affecting your data, we'll notify the account owner without undue delay, with what we know and what we're doing about it.
Questions regarding Data Processing Agreement?
hello@scanorbit.app