Effective date: 4 September 2026
This Privacy Policy applies to ORBIT Travel AI, orbitroyal.com, ORBIT mobile applications, and related digital travel services operated by Orbit NL. B.V., registered in the Netherlands(KVK 95754032). ORBIT NL B.V. is the controller for personal data described in this policy. Contact us at info@orbitroyal.com or +31 6 44 40 87 38.
Information we may collect
Depending on the features you use, we may process account and profile information; contact details; travel searches, preferences and itinerary information; booking and transaction references; customer-support communications; information you choose to provide to ORBIT AI; device, browser, language, security and diagnostic information; and consent or preference records. Where a feature requests access to device data such as location, photos, camera or notifications, access is requested through the relevant device permission and only used for the disclosed feature.
How we use information
We use information to provide and personalize ORBIT services, search and arrange travel, manage accounts and bookings, provide AI-assisted travel support, communicate with users, prevent fraud and abuse, maintain security and reliability, comply with legal obligations, resolve disputes and improve our services.
Legal bases
Where the GDPR applies, processing is based as appropriate on performance of a contract or steps requested before entering a contract, compliance with legal obligations, our legitimate interests in operating and securing the service, or consent where consent is required. You may withdraw consent for future processing where processing depends on consent.
Travel providers and service providers
To provide requested services, information may be shared with relevant airlines, accommodation providers, transport providers, travel technology and booking partners, payment processors, communications providers, cloud and infrastructure providers, identity/security providers and professional advisers. We share only the information reasonably required for the relevant purpose and do not sell personal data.
Payments
Payment transactions may be handled by authorized payment service providers. ORBIT does not need to retain complete payment-card credentials when payment information is collected and processed directly by such a provider.
AI features and third-party processing
ORBIT AI, ORBIT AI Concierge (Adam and Eve) and ORBIT Radar AI use a third-party AI processor, xAI Corp. (Grok), to generate replies. When you allow this, the text you type or speak in that conversation, and travel context needed for the reply, is sent to xAI to produce the response. Optional saved preferences are included only if you have already allowed that in Privacy & Consent.
The app asks for your permission in a separate screen before any personal data is sent to xAI. You can refuse. If you refuse, those AI replies are not generated and your messages are not shared with xAI. ORBIT does not sell AI conversation content and does not use personal itineraries to train public models.
International transfers
Travel is international by nature. When a requested journey or service requires processing outside the European Economic Area, or when a service provider processes data internationally, we use applicable safeguards where required by law.
Retention and security
We retain personal data only for as long as reasonably necessary for the purposes described above, including contractual, accounting, fraud-prevention and legal requirements. We use appropriate technical and organizational safeguards designed to protect information, although no online system can guarantee absolute security.
Cookies and local device storage
Our website and applications may use necessary cookies, local storage or similar technologies for language, session, security and preference functions. Additional technologies, where introduced and legally required, are subject to the applicable consent choices and our cookie information.
Children
ORBIT is a general travel service and is not directed to young children. Where a child’s information is required for a family booking, it should be provided by a parent, guardian or other person authorized to make the booking, subject to applicable law.
Your privacy rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection to processing, and may withdraw consent where applicable. Requests can be sent to info@orbitroyal.com. If the GDPR applies, you may also lodge a complaint with the Dutch Autoriteit Persoonsgegevens or another competent supervisory authority.
Account and data deletion
You can delete your ORBIT account in the app at any time from Delete Account, or from My ORBIT → Security. Deletion is completed in the app after you confirm with your password. Emailing info@orbitroyal.com is not required to finish deletion. We may retain information that must be kept for legal, accounting, fraud-prevention, dispute-resolution or other lawful purposes.
Changes to this policy
We may update this policy as ORBIT services develop or legal requirements change. The current version will be published on this page with its effective date.
Contact
Orbit NL. B.V.
Voorweg 79, 2376 AK Nieuwe Wetering, The Netherlands
Email: info@orbitroyal.com
Telephone: +31 6 44 40 87 38
Website: https://orbitroyal.com