Last updated 30/6/2026

Privacy Policy

Last updated: June 30, 2026

This Privacy Policy explains how Orblly ("we", "us", or "our") collects, uses, and protects your personal information when you use our platform. We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Information We Collect

Information you provide directly:

  • Name, email address, and password when you create an account
  • Profile information: bio, city, career role, company, skills, languages, and photo
  • Government-issued ID documents, if you choose to apply for identity verification
  • Phone number, if you choose to add it for verification purposes
  • Content you create: event listings, discussion posts, service listings, project posts, reviews, announcements, and chat messages

Information collected automatically:

  • Your last active timestamp (used to show "Active now" status to connections)
  • Usage data such as pages visited and features used

2. How We Use Your Information

We use the information we collect to:

  • Operate and improve the Orblly platform
  • Match you with relevant people, events, and content based on your circles and city
  • Send in-app notifications about activity relevant to you
  • Verify your identity if you apply for the verified badge
  • Investigate and act on reports of content or behaviour that may violate our Terms
  • Comply with legal obligations

3. Identity Verification Documents

If you choose to submit a government-issued ID for verification:

  • Your document is stored in a private, access-controlled storage bucket
  • It is accessible only to authorised Orblly moderation staff
  • It is used solely to verify your identity and is not shared with other members or third parties
  • You may request deletion of your document at any time by contacting us
  • If you delete your account, your ID document is permanently deleted as part of that process

4. Information Shared With Other Members

The following profile information is visible to other logged-in members:

  • Name, profile photo, bio, city, career role, skills, languages, and "looking for" preferences
  • Your circles (Career, Hobby, Life-stage)
  • Events you host, services you list, projects you post, and discussions you start
  • Your verified badge (but not the underlying document)
  • Your "Active now" status (visible only to accepted connections)

The following is never visible to other members:

  • Your email address
  • Your phone number
  • Your ID document
  • Your precise last-active timestamp (only a derived "Active now" status is shown)

5. Data Retention

  • If you delete your account, your personal information (name, bio, phone number, ID document, avatar) is permanently erased.
  • Content you created (events, reviews, discussions) is retained in anonymised form ("Deleted user") to preserve the integrity of other members' histories.
  • You may request erasure of specific content by contacting us.

6. Cookies and Tracking

Orblly uses cookies and similar technologies to maintain your session and remember your preferences. We do not use third-party advertising cookies. You can control cookies through your browser settings, though disabling them may affect your ability to use the Platform.

7. Third-Party Services

Orblly uses the following third-party services to operate the platform:

  • Supabase — database, authentication, and file storage (servers in Seoul, South Korea)
  • Vercel — hosting and content delivery

These providers process data on our behalf under their own privacy and security policies.

8. Data Security

We implement reasonable technical and organisational measures to protect your personal data, including encrypted storage for sensitive documents and access controls limiting who can view identity verification materials. No system is perfectly secure, and we cannot guarantee absolute security.

9. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Withdraw consent for processing (which may limit your ability to use certain features)
  • Request deletion of your personal data

To exercise any of these rights, contact us at privacy@orblly.com.

10. Children

Orblly is not intended for users under 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have done so, we will delete that data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform. Continued use of Orblly after changes take effect constitutes your acceptance of the revised Policy.

12. Contact

For privacy-related questions or to exercise your rights, contact us at:

privacy@orblly.com

Terms of ServicePrivacy PolicySafety