Processing terms · Draft
A boundary, not a signed claim.
These preview-stage notes describe intended processing boundaries. They are not presented as an executed enterprise DPA or a legally approved paid-service contract.
1. Current status
Orbitrain is an individual private preview. No team or employer offer is being presented. Controller, processor, international-transfer, and data-residency terms must be confirmed for the actual operating relationship before a formal DPA is offered.
2. Intended scope
The private product may process account information, context supplied by the learner, attempts, mentor interactions, evidence states, authentication information, and service-security records to deliver and protect the apprenticeship.
Orbitrain does not present the public Room response as product data. That response stays in the marketing-site browser session and is not included in the handoff URL.
3. Provider boundary
The service may depend on infrastructure, authentication, anti-abuse, transactional-email, storage, and error-monitoring providers. The active provider list, selected regions, contractual safeguards, and sub-processor notices require production verification before a paid offer.
4. Requests
During preview, access, correction, export, deletion, or processing questions can be sent to privacy@orbitrain.com. Requests may be handled case by case; automated completion is not represented as verified.
5. Paid-launch gate
A paid or organisation-sponsored offer requires legally reviewed terms, a verified provider inventory, confirmed data locations and safeguards, documented security measures, and tested request fulfilment.