Privacy Policy

Last updated: July 22, 2026

This Policy explains what personal data we process when you use usite (usite.cc), why, on what legal basis, and what rights you have. It covers our customers, visitors to usite.cc, and — in the limited role described in section 3 — visitors to the sites we publish for our customers.

1. Controller

Provider: UBASE LLC
Place of incorporation: Estado de Wyoming, Estados Unidos de América
Address: 1600 Van Lennen Ave, Ste 101, Cheyenne, WY 82001, EE.UU.
Privacy contact: privacy@orbitia.io

2. Data we process

Account: name, email address, hashed password, language and preferences.
Billing: plan, billing country, payment history and identifiers returned by Stripe. Full card details are handled by Stripe and never reach our servers.
Site content: copy, images, catalogue and settings you upload.
Usage and technical: IP address, user agent, pages viewed, referrer, timestamps and error logs.
Communications: messages you send us and our replies.

We do not intentionally process special categories of data (health, ethnicity, sexual orientation, political opinions). Please do not upload them to the dashboard.

3. When we are controller and when we are processor

For your customer data and for visitors to usite.cc, we are the controller.

For data collected by the sites and stores we publish on behalf of our customers (orders, contact forms, buyer details), the customer who owns the site is the controller and we act as processor, handling that data on their instructions. If you are a visitor or buyer of such a site, address your request to the site owner; if it reaches us, we forward it without delay.

4. Purposes and legal bases

Providing the Service (creating your account, publishing and maintaining your site, support) — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Billing and accounting — legal basis: contract and legal obligation (Art. 6(1)(b) and (c)).
Security, abuse and fraud prevention — legal basis: legitimate interests (Art. 6(1)(f)).
Aggregate product analytics — legal basis: consent, where implemented with non-essential cookies.
Advertising and campaign measurement (for example the Meta pixel) — legal basis: consent. These technologies do not run until you accept them in the cookie notice.
Marketing emails — legal basis: consent, withdrawable at any time from the unsubscribe link.

5. Processors and recipients

We use vendors that process data on our behalf, under a data processing agreement and solely to deliver the Service:

Hosting and CDN (United States and European Union).
Managed database and backups.
Stripe — payment processing and invoicing.
Transactional email provider — service notices and confirmations.
Analytics and advertising providers — only if you consented to the corresponding cookies.

We do not sell personal data and we do not disclose it to third parties for their own advertising.

6. International transfers

Our infrastructure is mainly located in the United States. Where your data is transferred outside the EEA or the UK, the transfer relies on the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable), together with supplementary technical measures such as encryption in transit and at rest. You can request a copy of those safeguards at privacy@orbitia.io.

7. Retention

Account and content: while your subscription is active and for 30 days after you close it.
Accounting and billing records: the period required by applicable tax law, typically 7 years.
Technical and security logs: up to 12 months.
Cookie consent: 180 days, after which we ask again.

8. Your rights

If the GDPR or UK GDPR applies to you, you have the right to access your data, to rectification, erasure, restriction of processing, objection, and data portability(receiving your data in a structured, commonly used format). You can also withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

If you are a California resident, the CCPA/CPRA gives you the right to know what we collect, to request deletion or correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined in that law, so there is nothing to opt out of.

To exercise any of these rights, email privacy@orbitia.io or use our data deletion form. We reply within 30 days (45 days under the CCPA, extendable once with notice). We may ask for extra information to verify your identity.

If you believe we have not handled your request properly, you may complain to the supervisory authority in your country of residence (in the UK, the ICO).

9. Cookies

Essential: session, form security and load balancing. Always used — the site cannot work without them.
Analytics: aggregate usage metrics. Only with your consent.
Advertising: campaign measurement and remarketing (for example the Meta pixel). Only with your consent.

On your first visit we show a notice where you can accept everything or keep essential cookies only. Your choice is stored for 180 days and you can change it by clearing the site cookies.

10. Security

We apply encryption in transit (TLS) and at rest, role-based access control, per-customer isolation, access logging and backups. No system is infallible: in the event of a breach likely to result in a high risk to you, we will notify you and inform the supervisory authority within 72 hours where the GDPR requires it.

11. Children

The Service is not directed to children under 16 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

12. Changes

We publish any change on this page with its date. For material changes we notify you by email before they take effect.