Back to Home

Privacy Policy

Last updated: May 13, 2026

1. Introduction

TROSTRUM TRADERS & COMMISSION AGENT (“we”, “us”, “our”) operates the Orbit platform at orbit.trostrum.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services. By using Orbit, you consent to the data practices described in this policy.

2. Information We Collect

  1. Account Information: When you create an account, we collect your name, email address, phone number, and password (encrypted). If you sign in with Google, we receive your name and email from Google.
  2. Business Information: Restaurant name, branch addresses, staff details, menu items, pricing, and other operational data you enter into the platform.
  3. Payment Information: When you subscribe to a paid plan, payment is processed by SafePay. We do not store your credit/debit card details. We retain transaction references and subscription status only.
  4. Customer Data: If your restaurant customers place orders through Orbit (via QR code self-ordering), we collect their name and phone number as provided by them. This data is stored under your tenant account.
  5. Usage Data: We automatically collect information about how you interact with the platform, including pages visited, features used, and timestamps. This is used to improve the service.
  6. Device Information: Browser type, IP address, device type, and operating system for security and analytics purposes.

3. How We Use Your Information

We use the collected information to:

  • Provide, operate, and maintain the Orbit platform;
  • Process subscription payments and manage your account;
  • Send service-related notifications (e.g., order alerts, subscription reminders);
  • Generate AI-powered insights and analytics for your restaurant;
  • Improve and optimize the platform based on usage patterns;
  • Detect and prevent fraudulent or unauthorized activity;
  • Respond to your support requests and complaints;
  • Comply with legal obligations under Pakistani law.

4. Data Sharing and Disclosure

  1. We do not sell your personal data. We will never sell, rent, or trade your personal information to third parties for marketing purposes.
  2. Service providers: We share data with trusted third-party providers who assist in operating the platform, including:
    • Google Firebase (hosting, authentication, database)
    • Google Gemini AI (anonymized restaurant data for insights generation)
    • SafePay (payment processing)
    • Google Analytics (anonymized usage data)
  3. Legal requirements: We may disclose your information if required by law, court order, or governmental authority.
  4. Multi-tenant isolation:Your restaurant data is isolated from other tenants. No restaurant can access another restaurant's data through the platform.

5. Data Security

We take appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (HTTPS/TLS) and at rest;
  • Firebase Authentication with secure JWT-based sessions;
  • Role-based access control to prevent unauthorized data access;
  • Firestore Security Rules enforcing tenant-level data isolation;
  • Rate limiting on public-facing endpoints.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

  1. Your account data is retained for as long as your account is active.
  2. If you cancel your subscription, your data remains accessible under the Free plan for 90 days. After 90 days of inactivity on a cancelled paid plan, we may permanently delete your data.
  3. You may request deletion of your account and all associated data at any time by contacting support@trostrum.com.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate or incomplete data;
  • Request deletion of your personal data;
  • Withdraw consent for data processing (this may affect your ability to use the service);
  • Export your data in a machine-readable format (CSV export available for orders, customers, and inventory).

To exercise any of these rights, please email support@trostrum.com.

8. Cookies and Tracking

Orbit uses essential cookies for authentication and session management. We use Google Analytics to understand usage patterns. No third-party advertising cookies are used. By using the platform, you consent to the use of these essential and analytics cookies.

9. Children's Privacy

Orbit is designed for business use and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the platform after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact: