Privacy Policy
We built Saral Orbit so that you can finish your document work without worrying about your files. This page explains, in plain words, what we collect, why, for how long, and what you can do about it.
Effective from 10 October 2026 · Applies to saralorbit.in
- Files you upload are used only to do the job you asked for. We do not read them, sell them, or use them to train AI models.
- Your original upload is deleted as soon as the work is done. Anything left behind by an error is swept away automatically within 2 hours. Result files are removed within a few hours at most.
- We do not sell personal data and we do not show you ads that follow you around the internet.
- You can download your data or delete your account yourself, any time, from your Profile page.
2. Who we are
Saral Orbit (“we”, “us”) runs the website saralorbit.in from Prayagraj, Uttar Pradesh, India. For the personal data described in this policy we decide why and how it is used, so we are the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the person responsible under the Information Technology Act, 2000 and the rules made under it.
When you upload a document that contains other people’s information (for example a customer’s Aadhaar copy or photo), you decide what is uploaded. Please upload only what you are allowed to use. We treat every uploaded file the same way — as private and temporary.
3. What we collect
| What | Details | When |
|---|---|---|
| Account details | Name and email address. If you set a password, we keep only a scrambled (hashed) form of it — never the password itself. If you use “Continue with Google” or “Continue with Microsoft”, we receive only your name and verified email, never your provider password. | Only if you create an account |
| Sign-in codes | One-time email codes are valid for 10 minutes and stored only in hashed form. Password-reset links are single-use and expire. | When you sign in or reset a password |
| Your files | The PDF, image or document you upload, and the result we create from it. See section 4. | Only while a tool is working |
| Tool usage | Which tool was used and how many times in a day (to apply your plan’s daily limit), and a record that a job finished. We do not store the content of your files in these records. | When you use a tool |
| Visit counter | A random session identifier is counted once per day to tell us how many people visit the site. It is not connected to your files. | When you open a page |
| Device and security records | For signed-in accounts: device type/browser label, IP address and time, used to enforce the “devices per plan” limit and to detect misuse. Important account actions are recorded in a security log with IP address. | When you sign in or change account settings |
| Payment records | Plan bought, amount, payment gateway reference number, status and invoice number. Card, UPI and bank details are entered on the payment gateway’s own page and are never stored by us. | When you buy a plan |
| Messages to us | What you write when you contact support, and your email address. | When you contact us |
We do not use fingerprinting, and at present we do not use Google Analytics, Facebook Pixel or similar tracking tools. If we ever add one, we will update this page and our Cookie Policy first.
4. What happens to your files
- Processed on our own server. Your file is worked on by our own software and is not sent to any other company’s service.
- Original upload: deleted as soon as processing finishes. If something fails in the middle, any leftover is removed automatically within 2 hours.
- Result file: kept only so that you can download it, and removed shortly after you download it. In every case it is removed automatically within 4 hours. Files used for “Sign Document” are removed within 8 hours.
- Only you get the result. A result can be downloaded only from the browser session that created it.
- We do not look at your content. Our staff do not open or review your files. We do not use them for advertising, profiling, or to train AI or machine-learning models.
- Some tools work inside your own browser (for example, preview and cropping). Whatever stays in your browser is never sent to us until you press the button that processes it.
5. Why we use your data
- To give you the service — run the tool you chose, keep you signed in, apply your plan and daily limit, take payments and send invoices.
- To keep the site safe — stop abuse, fraud, password guessing and repeated sign-in attempts, and fix faults.
- To improve Saral Orbit — understand which tools people need, using counts and not your content.
- To talk to you — verification codes, password resets, payment receipts and replies to your messages. We send marketing emails only if you have agreed to receive them, and you can stop them at any time.
- To follow the law — keep payment and tax records, and respond to lawful orders from Indian authorities.
We use your personal data on the basis of your consent, or for the limited “legitimate uses” the DPDP Act allows — such as providing a service you asked for, fulfilling a legal duty, and preventing fraud. You may withdraw consent at any time (see section 8); withdrawing does not affect work already done.
7. How long we keep data
| Data | Kept for |
|---|---|
| Uploaded files and results | Original: removed after processing (leftovers within 2 hours). Result: within 4 hours at most (Sign Document: 8 hours). |
| Sign-in session | Up to 24 hours, or until you log out. |
| Password-reset and email-verification records | Short-lived; cleaned out automatically after expiry (within 7–30 days). |
| Device records (for the device limit) | Removed after 60 days without use. |
| Visit counter | About 13 months. |
| Job records (“a job was done”) | About 6 months. |
| Daily usage counts | Up to 2 years. |
| Security log | Up to 1 year. |
| Account details | Until you delete your account. |
| Records of successful payments | Kept as long as tax and accounting law requires. After you delete your account these are no longer linked to your name or email. |
8. Your rights
Under the DPDP Act, 2023 you have the right to:
- Know what personal data of yours we hold and how it is used.
- Correct or update data that is wrong or out of date.
- Erase your data and delete your account.
- Withdraw consent at any time.
- Complain to us (section 13) and, if you are not satisfied, to the Data Protection Board of India.
- Nominate another person to exercise these rights for you if you die or cannot act yourself.
Fastest way: sign in and open Profile → My Data & Account. There you can download a copy of your data and delete your account on your own. When an account is deleted, your name and email are removed, your sign-in is closed, active plans are cancelled and your usage records are deleted. Otherwise write to us — we reply to rights requests within 15 days.
9. How we protect data
We use HTTPS, hashed passwords, protection against cross-site request forgery, rate limits against password guessing, and limit who can access the admin area. The details are on our Security page. No website can promise perfect security, so if we ever find that your personal data has been exposed in a way that could harm you, we will tell you and the authorities as the law requires.
10. Children
Saral Orbit is meant for people aged 18 and above. We do not knowingly collect personal data of children without a parent’s or guardian’s verifiable consent, and we do not track or target children. Students under 18 should use the site with a parent or teacher. If you believe a child has given us data without consent, write to us and we will delete it.
11. Where data is processed
Our servers and database are operated through our hosting provider, and your data is processed in India or in the data-centre region of that provider. Our payment, email and sign-in providers may process limited data in other countries; we choose providers who protect it. The DPDP Act allows such transfers except to countries the Government of India restricts.
12. Changes to this policy
We may update this policy when our service or the law changes. The date at the top shows the latest version. For important changes we will also put a notice on the website or email account holders.
13. Contact & grievances
Questions, requests or complaints about your data:
- Email: support@saralorbit.in (write “Privacy” in the subject)
- Or use the Contact page.
Grievance Officer: Saral Orbit, Prayagraj, Uttar Pradesh, India. We acknowledge a complaint within 2 working days and aim to resolve it within 15 days.