Privacy statement
Last changed on 18 October 2026.
Orbit is where a business keeps its appointments, clients, team, messages, quotes and invoices. In Orbit a business is a space. This statement says what Orbit keeps about the people it meets, why, where, for how long, and what you can ask of us. "We" are Kumonari, who run Orbit.
Who this is about
- Visitors read orbit.kumonari.net without an account.
- Members have an Orbit account and work in one or more spaces.
- Clients book with a space, write to it, or are written down by it.
Who decides what happens to the data
For your Orbit account and for this website, we decide, so we are the controller.
What a space writes down about its clients, and the work its members do inside it, belongs to that space. The space is the controller of it and we process it on the space's behalf, under the data processing agreement. If you booked with a business that uses Orbit, that business answers your questions about your data, and we help it to.
What we keep, and why
Visitors
Reading these pages stores nothing about you. Our servers' logs note the address a request came from, which we need to keep the service running and to stop abuse (our legitimate interest). Orbit has no analytics, no advertising, no tracking pixels, and loads no scripts or fonts from anybody else.
Members
- Your email address and the ways you sign in: sign-in links and codes, and the passkeys you add. We need these to give you your account (the agreement with you).
- Your name, photo and notes as you give them in each space, so the people you work with know who you are.
- What you write and do in a space: todos, comments, messages, documents, calendar entries and the record of who changed what. This is part of the space's records.
- Keys for assistants you connect to Orbit, and when each was last used.
- The letters we send you: sign-in links, invitations and notifications.
Clients of a space
What you and the space write down: your name, email address, phone number, address, birthday and notes, your bookings and the answers you gave to the space's questions, your messages and feedback, your payments and invoices, and which link or campaign brought you to the booking page. The space decides why it keeps these and on what basis. We process them only to run Orbit for the space.
When you pay a space online, you enter your payment details on the checkout of Mollie, the payment provider the space has its own account with. Orbit sends Mollie the amount and the booking's reference and hears back whether it was paid. It never sees your card or bank details.
Calls and errors
A call in Orbit goes straight between the browsers in it, or through our own relay server when a network does not allow that. Calls are not recorded. When something breaks, a report of the error is kept on our own servers so we can fix it.
Where it is kept
On servers we rent from Infomaniak Network SA in Switzerland, which also delivers our email. Infomaniak is the only company that processes personal data for us, and the data processing agreement lists it. The European Commission recognises Switzerland as protecting personal data as well as the EU does, so nothing leaves that protection.
Some services are connected by a space or a member rather than by us: a space's own Mollie account, a mailbox a space connects so Orbit can read and answer its email, and an AI assistant a member connects through Orbit's interface for assistants. What passes to those services is between the space or member and that provider, under that provider's terms.
How long we keep it
- Your account: until you delete it, in your account settings at id.kumonari.net. Deleting it removes your account and the ways you sign in. What you wrote as a member of a space stays in that space's records until the space removes it.
- A space's records: until the space removes them, or closes. Closing a space deletes its records.
- Sign-in links: 15 minutes. A client's link to their appointments works for 15 minutes, the visit it opens lasts 7 days, and the link in a booking confirmation lasts 400 days.
- Letters waiting to go out: deleted 7 days after they are sent.
- Server logs: only as long as we need them to keep the service running.
Cookies and what your browser keeps
Orbit sets only the cookies it needs to work, which is why it does not ask you to accept them.
| Cookie | What it is for | How long |
|---|---|---|
_orbit_key |
Keeps you signed in on orbit.kumonari.net, remembers your language and guards forms against forgery | 365 days |
_identity_key |
Keeps a sign-in going on id.kumonari.net | Until you close the browser |
_identity_web_user_remember_me |
Remembers you on id.kumonari.net | 365 days |
Your browser also keeps your appearance choices, such as the theme, fonts, text size and contrast, and any message you started and have not sent yet. These stay on your device.
Keeping it safe
Everything travels encrypted over HTTPS. The passwords of connected mailboxes and the keys of payment accounts are stored sealed. A space sees only its own records. The few people at Kumonari who can look into a space to help it can only read, and every look is written down.
Your rights
You can ask us for a copy of the data we hold about you, to correct it, to delete it, to limit or object to what we do with it, and to have it in a form you can take elsewhere. For data a space holds about you, ask that space; we help it answer. You can also complain to the data protection authority of the country where you live or work, or where we are established.
Orbit is made for businesses and is not meant for children under 16.
When this changes
The date at the top changes with every change. A change that matters to how your data is used is announced in Orbit before it applies.
Who runs Orbit
Orbit is run by Kumonari.