Privacy Policy
Version 2026-10-29 · Terms of Service · Acceptable Use Policy · Data Processing Agreement
This policy explains what data ORBEAT handles about the people who have an account and how it protects it. Anyone who receives a listening link has their own Recipient Privacy Notice. ORBEAT is operated by MARS Digital LLC.
1. Who is responsible
Your account data: MARS Digital LLC is responsible for your account data (your name, your email, your sign-in and how you use ORBEAT).
Customer content: the data a company loads into ORBEAT about its catalog, its writers and artists, its contacts, its agreements and its sends is that company’s responsibility. MARS handles it on the company’s behalf, under the Data Processing Agreement. If your data is in ORBEAT because a company loaded it, send your request to that company; if you write to us, we will pass it on.
2. What data we handle
Account: name, email, company, role and language.
Sign-in: your password, kept only in irreversibly hashed form (never readable), the one-time codes we email you when you do not use it, the session cookie, the IP address, the device and the browser.
Usage: the pages and actions inside ORBEAT, errors and the time of each, to run and protect the service.
Acceptances: the version of these documents you accepted, the date, your language, your browser and a one-way summary (hash) of your IP.
Messages: what you write to us when you ask for help.
Customer content: as described in section 1, handled on the company’s behalf.
3. What we use it for
To give you access and provide the service; to send you service emails (sign-in codes, notices, signature requests); to protect ORBEAT and prevent abuse; to support you; to make backups; to understand, in aggregate, how ORBEAT is used and improve it; and to comply with the law.
We do not sell your data, we do not share it for advertising and we do not use it to train artificial intelligence models.
4. Legal bases
Where the law requires a legal basis, we rely on: performance of the contract (providing ORBEAT to you), our legitimate interest (security, abuse prevention and improving the service), compliance with legal obligations and, where needed, your consent, which you may withdraw at any time.
5. Artificial intelligence
Some features use artificial intelligence, for example drafting an email in Reach or reading a split sheet you upload in Pitch. When you use one, we send the provider only the content needed to produce the result, and the result is stored in your company’s account. The provider’s terms do not allow it to train its models on that content.
Today that provider is Anthropic (Claude). We may use other artificial intelligence providers for the same purposes, for example OpenAI (ChatGPT), Google (Gemini) or others, always on the same conditions: only the content needed, and no permission to train their models on it. To the extent the law allows, this policy covers them; the current list is in annex 2 of the Data Processing Agreement and you may ask for it at privacy@marsmusic.pro.
8. How long we keep it
Your account data, for as long as the account exists and afterwards only as needed to comply with the law or resolve claims. Acceptances, for the applicable limitation period, even after the account is closed. Technical logs, for short periods. Backups are replaced on a regular cycle.
Customer content, according to the company’s instructions and the Data Processing Agreement.
9. Your rights
Depending on the law of your country, you may ask for access to your data, its correction or deletion, object to or restrict its use, ask for a portable copy and withdraw consent. In Mexico these are your ARCO rights; in Brazil, the rights the LGPD gives. Write to privacy@marsmusic.pro; we may ask you to confirm your identity and will answer within the time the law sets. If your request is about customer content, we will pass it to the company responsible.
If you live in California or another United States state with a privacy law, you also have the right to know what data we handle (identifiers, internet activity, professional information and, if payments ever exist, commercial information), to have it corrected or deleted and not to be treated differently for using your rights. We do not sell or share personal data or use sensitive data to infer characteristics about you. You may act through an authorized agent and, where the law provides, appeal our answer.
You may also contact the data protection authority of your country (for example, your country’s authority in the European Union, the ANPD in Brazil or the Secretaría Anticorrupción y Buen Gobierno in Mexico).
10. International transfers
Data is stored on servers in the United States. When it leaves your country, we use the safeguards the applicable law requires, such as standard contractual clauses with our providers.
11. Security
Data travels encrypted and is stored encrypted. Every database table has rules that limit who sees each row by company and role; server keys never reach the browser; files are kept in private storage and handed out through signed links that expire; we back up the database every night and check the backup. No system is perfect: if an incident affects your data, we will tell you as the law requires.
12. Children
ORBEAT accounts are for people 18 and older. If a company needs to record data about a writer who is a minor, it does so as customer content and under its responsibility.
13. Changes and contact
We may change this policy at any time, with or without prior notice, except where the applicable law requires us to notify you or obtain your consent; in that case we will. The version in force is always the one published on this page, with its date, and it applies from the moment it is published. ORBEAT may also ask you to accept the new version before you continue. For any question: MARS Digital LLC · privacy@marsmusic.pro.
© 2026 MARS Digital LLC. All rights reserved.