This page explains what we collect and why.

1. Who we are

I-ORBITX is the business name of Murat Atif Sayar, a sole proprietor based in Houston, Texas, United States. We decide how the data on this page is used. Write to us through the contact form about anything on this page.

2. Your account

To open an account, we store your name, your email address, your password in a form that cannot be reversed, the account type and, for an organization, its name. The country is optional. Every account signs in with a second step: an authenticator app or a passkey.

3. Sign-in records

We record every sign-in attempt, successful or not, with the email address entered, the network (IP) address, the country our network provider reports for that address, the time and the browser details. We never record passwords. We use these records only to protect accounts. After five failed attempts on the same account within one hour, from any network address, we pause sign-in to that account and email the account holder the addresses, countries and times of the attempts. The email carries two links: one lifts the pause, the other reports that it was not them and blocks those network addresses from the sign-in pages for 30 days. Resetting the password also lifts the pause. When an account is signed in to from a country it has not been used from in the past year, we email the account holder and receive a copy ourselves.

4. Contact form

When you write to us through the contact form, we store your name, your email address, your company if you give it, the subject, your message and the language of the page. We use them only to reply to you. Our replies reach you by email and are kept with your message. The same applies when you write to us through the form on the For investors page: we store your name, your email address, your organization if you give it and your message.

If you leave your email address to be notified when accounts or applications open, we keep that address and the date for this purpose only, send one email on that day, and delete the address afterwards or when you ask.

5. Requests and jobs

The requests, messages and files you send through your panel are kept with your account. So are the quotes, approvals, deliveries and acceptances, each with its date and time.

6. Payments

You enter card and bank details on the payment page of Stripe, our payment provider, and they stay with Stripe. They never reach our server. For each payment, we store the amount, the date and the result.

7. Access to your cloud

When you grant us access, we record the cloud, your account, organization or project ID, the level you granted, the reason, when it was granted and when it was removed. We use the access only for the jobs it was given for.

8. Ratings

Your rating, your comment and your reference choice are stored with the job. Ratings and comments are public on our site; your company's name appears only if you allowed it.

9. Cookies

The site sets a few functional cookies: a session cookie when you sign in, a security (CSRF) cookie that protects forms, a cookie that remembers your language, and a one-year cookie that remembers you dismissed the cookie notice. Cloudflare, which protects the site, can set its own security cookies to tell people from automated traffic. Stripe uses its own cookies on its payment page. There are no analytics or advertising cookies.

10. Who sees your data

We share data only with the services that run the site and your jobs: Stripe for payments, Amazon Web Services for our server and for the emails we send, and Cloudflare for the network and the protection in front of the site. Cloudflare also gives us total visit counts; this needs no script on our pages. The engineer or engineers named on your request see that request. We do not sell your data or share it for advertising. We give data to authorities only when the law requires it.

11. Where your data is

Our servers are in the United States. If you use the site from another country, your data is stored and processed in the United States.

12. How long we keep it

We keep your account, and the requests, messages and files in it, until you ask us to delete them. Quotes, approvals and payment records stay for 7 years after the job, for tax and accounting reasons. Sign-in records are deleted after one year. Contact form messages and our replies are deleted one year after the last message between us. If you have an account with us, they are kept with your account instead. Our backups keep copies for up to 30 days, so deleted data leaves the backups within 30 days. If you delete your account, we remove your name and your comment from your rating; the score stays on the site without your name.

13. Your choices

At any time you can ask to see what we hold about you, to correct it, to get a copy of it, or to delete it. Write to us through the contact form and we reply within 30 days. When you ask us to delete your data, we delete everything except the records we keep for tax and accounting (section 12). You can also complain to the data protection authority in your country.

14. Security

Every account signs in with two steps. Passwords are stored in a form that cannot be reversed. Our access to your cloud is limited to the level you grant, until you remove it. To slow down automated traffic, our forms count the sends from each network address for 24 hours. During that time the address is kept only as a one-way code, and it is never stored with your message.

15. Children

The site and the panel are not for people under 18.

16. Changes to this notice

If we change this notice, we tell you by email and in your panel before the change takes effect.

17. Language

This notice is written in English and Turkish. If the two versions differ, the English version applies.