Privacy Policy

1. Overview

Orbi Smart Wallet ("Orbi", "we", "us", or "our") is committed to protecting your privacy. This policy describes what data we collect, how we use it, and your rights. Orbi is designed with a minimal data footprint — your funds are secured by your passkey, not by us.

2. Data We Collect

We collect only what is necessary to provide the service:

• Email address — used to identify your wallet account and link it to your passkey
• Wallet address — your public Stellar smart contract address, which is public by nature of the blockchain
• Passkey credential ID — a non-secret identifier linking your device passkey to your wallet; we never store your private key
• Transaction data — transactions are recorded on the public Stellar blockchain; we do not store copies beyond what is needed for the relay service

3. Data We Do Not Collect

• Private keys or seed phrases — we never have access to these
• Biometric data — Face ID and Touch ID are processed entirely on your device by your operating system
• Advertising identifiers or behavioral tracking data
• Device fingerprints or precise location

4. How We Use Your Data

We use the data we collect solely to:

• Create and manage your wallet account
• Authenticate you during sign-in via the passkey relay flow
• Process and relay transactions to the Stellar network
• Respond to support requests
• Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Cookies

We use a single strictly necessary cookie:

This cookie is strictly necessary for the service to function and does not require consent under GDPR or CCPA. No third-party or advertising cookies are used.

6. Data Retention

We retain your account data (email, wallet address, credential ID) for as long as your wallet account exists. You may request deletion of your account data at any time by contacting us. Note that transaction history on the Stellar blockchain is permanent and outside our control.

7. Third-Party Services

Orbi interacts with the following external services:

• Stellar Network — all transactions are submitted to the public Stellar blockchain
• Vercel — our hosting provider; subject to Vercel's Privacy Policy

We do not integrate Google Analytics, Meta Pixel, or any other third-party tracking service.

8. Security

We take reasonable technical and organizational measures to protect your data, including encryption in transit (HTTPS) and at rest. However, no system is completely secure. You are responsible for keeping your device and passkey safe.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at support@orbiwallet.xyz.

10. Children's Privacy

Orbi is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at support@orbiwallet.xyz.