OrbiCypher
Privacy Policy
How OrbiCypher collects, receives, uses, discloses, stores and protects personal information in connection with this website, our contact form and our website design and development services.
Effective date
29 October 2026. Last updated: 29 October 2026.
1. Introduction
This Privacy Policy explains how OrbiCypher collects, receives, uses, discloses, stores and protects personal information in connection with https://orbicypher.com, our contact form, our website content and our website design and development services. OrbiCypher is operated by Prasad Panchal, a sole proprietor. Business and privacy contact: • Proprietor: Prasad Panchal • Business name: OrbiCypher • Address: Phale Heights, Ambegaon Bk, 411046, Maharashtra, India • Email: hello@orbicypher.com • Telephone: +91 7218662541 • Website: https://orbicypher.com In this policy, “OrbiCypher,” “we,” “us” and “our” refer to the business operated by Prasad Panchal. This policy should be read with our Terms of Service and Cookie Policy.
2. Scope and applicable law
This policy applies to information processed through our website, contact forms, communications, client projects and related business activities. Privacy requirements vary by jurisdiction. Depending on the circumstances, applicable requirements may include Indian data-protection and information-technology laws, consumer-protection requirements and privacy laws in countries where our services are offered or individuals are located. We will handle personal information in accordance with applicable legal obligations as they come into force. Nothing in this policy is intended to remove a right that cannot legally be excluded.
3. Personal information we may process
The information we process depends on how you interact with us.
3.1 Contact-form information
Our contact form may collect: • Name. • Email address. • Country calling code and telephone number. • Preferred callback time. • Your enquiry message. • The form's subject or submission metadata. • An hCaptcha verification result associated with the submission. Please do not submit passwords, payment-card details, government identification numbers or unnecessary sensitive personal information through the general contact form.
3.2 Project and business information
When you request or purchase services, we may process information such as your business name, website, project requirements, branding, supplied files, technical specifications, communications, quotation details, invoices and project records. If you provide information about another person, you should ensure that you have the necessary authority to share it and that doing so is lawful.
3.3 Website analytics and technical information
Our website uses Lovable's visit-counting analytics, according to the implementation reviewed for the site. The information described in Lovable's documentation includes: • Visits and pages viewed. • Approximate visit duration and whether a visitor leaves after viewing one page. • Referring websites. • Campaign parameters included in links. • Visitor country. • Device type. The analytics script runs in the visitor's browser and sends visit events to the website address. According to the documentation reviewed, Lovable collects and stores the resulting analytics data on its side, and its visit counting does not use cookies as described in that documentation. The exact retention period and whether IP addresses are collected or retained by Lovable have not been independently confirmed. We therefore do not claim that Lovable analytics collects no IP addresses or retains no technical identifiers. The website may also generate technical information needed to deliver requests, maintain security, diagnose errors and operate the hosting platform. The precise information handled by the hosting infrastructure depends on its configuration and provider practices.
3.4 Cookies and browser storage
The website's reviewed implementation uses browser storage for the following purposes: • Remembering the visitor's light or dark theme preference. • Maintaining a sign-in session for authorised writers who access the content dashboard. A hosting-platform cookie named __dpl was observed during a live check. Its presence was attributed to the hosting platform rather than application code. Its exact purpose, lifetime and processing details have not been independently verified. The analytics implementation contains code that could potentially set a session identifier, but the reviewed test did not observe it being set. The exact browser-storage behaviour of hCaptcha has also not been fully verified. Additional details are provided in our Cookie Policy. We will not represent an unverified cookie, provider or retention period as confirmed.
3.5 Writer dashboard and authentication
The website uses Lovable Cloud, built on Supabase, for database and related application functionality. The reviewed implementation stores website content and configuration, including blog articles, demo-website information, editable site text and logos, uploaded article images, and writer-account information such as Google email addresses and account roles. Google sign-in is used for writer authentication, according to the implementation reviewed. Google may process information needed to authenticate the writer under Google's applicable terms and privacy practices. The writer dashboard is intended for authorised content management. It is not intended as a public visitor account system.
3.6 Contact-form technical information
When a visitor submits the contact form, Web3Forms receives the information needed to forward the submission. The browser connection may also expose technical information, such as an IP address and browser details, to the service. Our implementation uses hCaptcha verification, a hidden anti-spam field and a submission waiting-time check. We have not independently confirmed the account-level hCaptcha verification settings or every item of data processed by the hCaptcha service.
3.7 Payment and accounting information
If you purchase our services, we may process invoices, billing contact details, transaction references, payment status and records needed for accounting, tax, dispute resolution or legal compliance. We do not intentionally request full payment-card credentials through the general website contact form.
4. How we use information
We may process personal information for the following purposes: 1. Responding to enquiries and communicating with prospective clients. 2. Preparing quotations, proposals and project plans. 3. Providing, maintaining and supporting contracted services. 4. Managing client relationships, payments, invoices and project records. 5. Operating, protecting and troubleshooting the website and dashboard. 6. Understanding website usage and performance through configured visit-counting analytics. 7. Preventing spam, automated abuse and unauthorised access. 8. Managing writer authentication and website content. 9. Responding to privacy requests, complaints and legal claims. 10. Meeting applicable legal, accounting, tax and regulatory obligations. 11. Establishing, exercising or defending legal claims where necessary and lawful. We do not currently send promotional marketing messages. If this practice changes, we will review the applicable legal requirements and update our practices and disclosures as necessary.
5. Lawful processing and consent
Depending on the applicable law and circumstances, processing may be based on consent, steps taken at your request before entering a contract, performance of a contract, compliance with legal obligations, legitimate interests where recognised by law, or another permitted basis. Where consent is legally required, we will seek it through an appropriate mechanism. Visiting the website alone will not be treated as consent where the law requires an affirmative choice. Where consent is used as the legal basis, you may withdraw it in the manner made available for that processing. Withdrawal does not invalidate processing lawfully carried out before withdrawal and does not prevent processing that is independently permitted or legally required. This policy does not assert that a particular consent mechanism is already implemented for every technology. The actual configuration must be assessed against the requirements applicable to the relevant processing.
6. Contact forms and Web3Forms
Our contact form uses Web3Forms to transmit submissions to us. Information entered in the form may include your name, email address, telephone number, country calling code, preferred callback time and message. Web3Forms may also receive technical information associated with the connection, such as IP address and browser details. According to the Web3Forms documentation reviewed for our implementation, the service forwards submissions and states that it does not store form submissions. Its documentation also describes periodic deletion of server logs, but the exact log-retention period has not been confirmed. The form submission is forwarded to our email inbox. We may retain that email and related correspondence in accordance with our business-record needs and applicable law. Accordingly, the statement that Web3Forms does not store submissions does not mean that an enquiry email is automatically deleted from our inbox. Web3Forms is an independent provider. Its published documentation is available at: • Privacy Policy: https://web3forms.com/privacy • Terms of Service: https://web3forms.com/terms • Documentation: https://docs.web3forms.com We cannot guarantee uninterrupted delivery of every submission. If your enquiry is time-sensitive, you may email hello@orbicypher.com directly.
7. Lovable hosting, analytics and Supabase
The website is hosted through Lovable and uses Lovable's visit-counting analytics. Lovable's documentation reviewed for this policy states that its visit-counting data is not passed to an external analytics company. The website also uses Lovable Cloud, built on Supabase, for database and application functionality. The database stores website content, demo-website details, site text and logos, uploaded article images, and writer-account information and roles. According to the implementation reviewed, visitor analytics and contact-form messages are not stored in this database. Information stored in the database remains subject to the application's configuration, provider infrastructure, access controls, backups and deletion processes. Our current review did not identify an automatic deletion schedule for all database content. The exact underlying hosting infrastructure, analytics retention period, IP-address handling and all provider-side logs have not been independently verified. We will not claim a particular infrastructure operator or data-storage location without confirmation. Relevant provider information: • Lovable: https://lovable.dev • Supabase: https://supabase.com • Supabase Privacy Policy: https://supabase.com/privacy Please consult the providers' current documentation for additional information about their processing practices.
8. hCaptcha and anti-spam protection
The contact form uses hCaptcha as an anti-spam mechanism, according to the implementation reviewed. It is configured to load when a visitor begins interacting with the contact form. The site also uses a hidden anti-spam field and a waiting-time check. hCaptcha may process technical and interaction information necessary to distinguish human activity from automated submissions. The precise data categories, storage behaviour, retention period and account-level verification configuration have not been fully verified. For additional information, consult hCaptcha's current privacy notice and terms at: • https://www.hcaptcha.com/privacy • https://www.hcaptcha.com/terms The use of an anti-spam service does not guarantee that every spam submission will be blocked or that every legitimate submission will succeed.
9. Google sign-in
Google sign-in is used for writer authentication, according to the implementation reviewed. It is not described as a general visitor sign-in feature. Google may process account information and authentication-related technical data under its own terms and privacy policy. The relevant writer-account information is also handled by the website's authentication and database services as configured. Google privacy information is available at: • https://policies.google.com/privacy We have not independently verified all Google-side retention periods.
10. Email and communications
Contact-form submissions are forwarded to the email inbox associated with our business. Email communications may contain personal information supplied by you or generated during a project. Our email provider may process and retain messages, metadata and security logs according to its own systems and policies. The exact provider-specific retention period has not been confirmed in this policy. We retain business correspondence as reasonably necessary to respond to enquiries, perform services, maintain records, resolve disputes and meet applicable legal obligations. Please avoid sending unnecessary sensitive information by email.
11. Marketing communications
OrbiCypher does not currently send promotional marketing messages. We may send non-promotional communications necessary to respond to your enquiry, provide a quotation, deliver a project, issue an invoice, address a security issue or meet a legal obligation. If we introduce promotional communications in the future, we will handle them in accordance with applicable law, including obtaining consent where required and providing an appropriate opt-out mechanism where required.
12. Disclosure and recipients
Information may be made available to the following providers or recipients where necessary for the purposes described in this policy: • Lovable: website hosting and visit-counting analytics. • Lovable Cloud / Supabase: database and application functionality. • Web3Forms: contact-form transmission and email forwarding. • hCaptcha: anti-spam and human-verification functionality. • Google: writer authentication. • Our email provider: receipt and retention of contact-form messages and correspondence. • Professional advisers and service providers: where reasonably necessary for business operations. • Government authorities, courts or regulators: where disclosure is legally required or otherwise lawful. • Relevant parties in a business transfer: where lawful and subject to applicable privacy requirements. We do not currently use advertising or retargeting pixels in the website code reviewed. This does not establish that every independent provider is incapable of collecting technical information through its own infrastructure. We do not sell personal information to third parties for money. We do not provide contact information to other parties for their independent promotional marketing merely because you contacted us.
13. International processing
Some providers may process or store information outside India, depending on their infrastructure and configuration. The exact location of all provider systems and backups has not been confirmed. We therefore do not promise that all personal information is stored exclusively in India. Where personal information is transferred internationally, we will take the steps required by applicable law, which may include reviewing provider terms, contractual protections, transfer restrictions or other safeguards. If you are located outside India, the privacy and consumer-protection laws of your country may apply to some aspects of our processing or services, depending on the circumstances.
14. Data retention
We retain personal information for as long as reasonably necessary for the purpose for which it was collected, taking account of business needs, security, dispute resolution and applicable legal obligations. Our intended retention approach is as follows: • Contact-form enquiries: retained in our email inbox as reasonably necessary to respond, manage a potential project and maintain business records. • Client project records: retained while the project is active and for a reasonable period afterwards for support, warranty, dispute resolution and recordkeeping. • Invoices and tax records: retained for the period required by applicable law. • Website content and database records: retained until deleted or updated through the applicable administration process, subject to backups and provider systems. • Writer-account records: retained while the account is required for authorised access and for any necessary security or recordkeeping period. • Lovable analytics: provider retention period not independently verified. • Web3Forms server logs: the provider describes periodic deletion; the exact period is not independently verified. • hCaptcha records: provider retention period not independently verified. • Google authentication data: provider retention period not independently verified. • Hosting and technical logs: retention depends on the hosting provider's systems and configuration and has not been fully verified. Where information is no longer needed, we will take reasonable steps to delete it or otherwise handle it in accordance with applicable law. Some records may need to be retained to meet legal obligations, resolve disputes, prevent abuse or maintain security. We do not promise automatic deletion after a fixed period unless that schedule has been verified and implemented.
15. Security
We take reasonable steps appropriate to our business and the information involved to protect personal information from unauthorised access, loss, alteration, disclosure or misuse. Security measures may include provider security features, access restrictions, authentication, credential management, updates and reasonable operational controls. No online service, transmission method or storage system can be guaranteed to be completely secure. We therefore cannot promise absolute security. If we become aware of a personal-data incident, we will assess and investigate it, take reasonable steps to contain it and make notifications where required by applicable law. Please contact us promptly if you believe your personal information or project access has been compromised.
16. Your privacy rights and requests
Depending on the law applicable to you and the relevant processing, you may have rights to request access to, correction of, completion of or deletion of personal information; withdraw consent; object to certain processing; obtain information about processing; or lodge a complaint with a relevant authority. These rights may be subject to legal exceptions, identity verification and recordkeeping obligations. To make a request, email hello@orbicypher.com with the subject line “Privacy Request.” Explain the nature of your request and provide enough information to help us identify the relevant records. We may ask for reasonable verification before acting. Please do not send passwords or unnecessary identity documents. We will respond within the period required by applicable law or, where no specific period applies, within a reasonable time. If we cannot fully comply, we will explain the reason where legally appropriate.
17. Children
Our services are intended for businesses and general audiences and are not specifically directed at children. We do not knowingly seek to collect children's personal information in circumstances where parental consent or other safeguards are required. If you believe a child has provided personal information to us inappropriately, contact hello@orbicypher.com so we can review the matter and take appropriate action.
18. Third-party websites
Our website may contain links to external websites or services. Those websites operate under their own terms and privacy policies. We do not control independent websites' privacy practices. You should review their policies before providing them with personal information.
19. Changes to this policy
We may update this Privacy Policy to reflect changes in our services, data practices, providers or legal obligations. The latest version will be published on https://orbicypher.com with a revised effective or last-updated date. Where applicable law requires notice or consent for a material change, we will take the required steps.
20. Privacy contact and complaints
For privacy questions, requests or complaints, contact: Prasad Panchal — Proprietor, OrbiCypher Phale Heights, Ambegaon Bk, 411046, Maharashtra, India Email: hello@orbicypher.com Telephone: +91 7218662541 Website: https://orbicypher.com Please use the subject line “Privacy Request” or “Privacy Complaint.” We will review the matter reasonably and within any timeframe required by applicable law.