Privacy Policy

1. Who we are

Orbight Ltd (“Orbight”, “we”, “us”) is a technology company registered in Ghana. We build community-first campus transportation and personal safety tools, including Shuttle (real-time campus bus tracking) and Safe Walk(location-based personal safety). Our website is orbight.com.

If you have questions about this policy, contact us at support@orbight.com.

2. What data we collect and why

a) Early access sign-ups

When you join our early access list we collect your name, email address, and your product interest (Shuttle, Safe Walk, or both). We use this to notify you when we launch in your area and to send you occasional product updates. Legal basis: your consent (you can unsubscribe at any time).

b) Complaints and support messages

When you submit a complaint we collect your name, email address, and the details of your complaint. We use this solely to investigate and respond to your issue. Legal basis: our legitimate interest in resolving service complaints.

c) Safe Walk — location data

Safe Walk is a voluntary opt-in feature. It collects your real-time GPS location only while you have an active Safe Walk session running in the Orbight mobile app. Location data is:

• Shared only with trusted contacts you have explicitly chosen.
• Shared with emergency services only if you trigger an SOS alert or if a trusted contact requests emergency assistance on your behalf.
• Not stored permanently — session location data is deleted within 24 hours of the session ending.
• Never sold or used for advertising.

Legal basis: your explicit consent before each session. You can end a session and revoke location sharing at any time from within the app.

d) Website analytics

We use Vercel Analytics to understand aggregate traffic patterns (pages visited, general geographic region, device type). This does not use cookies and does not identify you personally.

3. How long we keep your data

4. Third-party processors

We share your data with the following trusted processors only to the extent necessary:

We do not sell your personal data to any third party. We do not use your data for targeted advertising.

5. Your rights

Under the Ghana Data Protection Act 2012 (Act 843) and general privacy best practice, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to delete your data (“right to be forgotten”). We will comply within 30 days unless we are legally required to keep it (e.g. an open legal matter).
• Portability — receive your data in a machine-readable format (CSV or JSON) so you can transfer it to another service.
• Withdraw consent — unsubscribe from emails at any time or end a Safe Walk session. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Object — object to processing based on legitimate interests.

To exercise any of these rights, email support@orbight.comwith the subject line “Privacy Request”. We will respond within 14 days.

6. Location sharing and legal obligations

Safe Walk may share your location with authorities only in the following circumstances:

• You manually trigger an SOS alert within the app.
• A trusted contact you designated activates an emergency alert on your behalf.
• We receive a valid court order or lawful request from Ghanaian law enforcement under the Electronic Communications Act 2008 or the Ghana Data Protection Act 2012.

We will notify you of any law enforcement request where we are legally permitted to do so. We do not provide voluntary, proactive access to location data to any government agency.

7. Ghana Data Protection Act 2012 compliance

Orbight Ltd processes personal data in accordance with the eight data protection principles under the Ghana Data Protection Act 2012 (Act 843):

1. Data is collected for specified, explicit, and legitimate purposes and not processed in ways incompatible with those purposes.
2. Data collected is adequate, relevant, and not excessive for the stated purpose.
3. Data is accurate and kept up to date where necessary.
4. Data is not kept longer than necessary (see retention table above).
5. Data is processed in accordance with the rights of data subjects (see Section 5).
6. Appropriate technical and organisational security measures are taken against unauthorised access, loss, or destruction.
7. Data is not transferred to countries without adequate protection unless appropriate safeguards are in place (our EU-based processors use standard contractual clauses).
8. We have registered with the Data Protection Commission of Ghana (or are in the process of doing so) as required by Act 843.

8. Security

We protect your data using industry-standard security measures including HTTPS encryption in transit, encrypted database storage, strict access controls, and regular security reviews. No system is 100% secure — if you suspect a breach, please contact us immediately at support@orbight.com.

9. Cookies

This website does not use tracking or advertising cookies. We use one functional security cookie (csrf_token) to protect forms from cross-site request forgery. This cookie contains no personal information and expires after 8 hours.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date at the top and, for significant changes, notify subscribers by email. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact

Orbight Ltd
Accra, Ghana
support@orbight.com