Orbys
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
School/device-management software that collects device, location, and ID data, keeps it for years, and uses cookies for ads.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account details plus device data, IDs, images, cookies, and sometimes GPS from managed tablets.
Read the exact line
Privacy policy
“This information varies by operating system and may include information specific to device hardware and settings, installed software including usage statistics, and location information.”
Training
They run the service, improve it, send promo mail if you agree, and use cookies for targeted ads.
Read the exact line
Privacy policy
“We and our partners use cookies and similar tracking technologies, such as pixels and web beacons, to analyze trends, administer the site, track website-wide movements of visitors and users, deliver targeted advertisements”
Sharing
They say they never sell data, but vendors, payment firms, hosts, and buyers in a sale can see it.
Read the exact line
Privacy policy
“We take your privacy very seriously, and we will never sell customer data or personal data.”
Kept
After you delete an account they still keep transaction data for 10 years.
Read the exact line
Privacy policy
“Once such account is deleted, said data will be removed from our databases, keeping the data related to the transactions carried out for 10 years”
Controls
You can ask by email for access, correction, or deletion, using their forms and a copy of your ID.
Read the exact line
Privacy policy
“ORBYS EMEA has forms for the exercise of any of the aforementioned rights, for which you must contact us at the following email address rgpd@orbys.eu requesting the model you need.”
Fine print
Registered users get an email on policy changes, but they still say continued use means you agree.
Read the exact line
Privacy policy
“Your continued use of the Service after any privacy policy changes become effective indicates that you have read, understood, and agree to the current version of the privacy policy.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Request access, correction, or deletion
Email rgpd@orbys.eu and ask for their rights form; they require electronic signature or a photocopy of ID
Unsubscribe from promotional email
Follow the unsubscribe link in each commercial email or email rgpd@orbys.eu
File a complaint with the Spanish DPA
Spanish Data Protection Agency if they do not handle your rights request
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
On managed school tablets they can turn on GPS when the device is in lost mode.
Read the exact line
Privacy policy
“Access to GPS (geopositioning) in lost mode.”
For example, if a school tablet is marked lost, the app can look up where it is.
The school app can process government ID numbers, birth dates, names, and photos.
Read the exact line
Privacy policy
“The application DMCS may require the processing of the following personal data of the user to provide the service:The applicationDNI/NIF/NIEProceedings.Course level/group.Birthdate.Full name.Image.”
For example, a student’s ID card number and photo can sit on their servers as part of the school service.
They and partners track you across the site to show targeted ads.
Read the exact line
Privacy policy
“We and our partners use cookies and similar tracking technologies, such as pixels and web beacons, to analyze trends, administer the site, track website-wide movements of visitors and users, deliver targeted advertisements, and gather demographic information about our user base.”
For example, a visit to their site can be used with partner cookies to show you ads later.
Deleting your account does not wipe purchase history; they keep it for a decade.
Read the exact line
Privacy policy
“Once such account is deleted, said data will be removed from our databases, keeping the data related to the transactions carried out for 10 years, without being accessed or altered, in order to comply with the legally valid deadlines.”
For example, even after you leave, they still have ten years of your order records.
If they change the rules, keeping using the service counts as saying yes.
Read the exact line
Privacy policy
“Your continued use of the Service after any privacy policy changes become effective indicates that you have read, understood, and agree to the current version of the privacy policy.”
For example, you might miss the email and still be treated as having agreed to a new policy.
They promise not to sell your personal data.
Read the exact line
Privacy policy
“We take your privacy very seriously, and we will never sell customer data or personal data.”
For example, they say they will not sell a student list to a marketing company.
Helpers who run payments, hosting, and similar work can receive your data.
Read the exact line
Privacy policy
“We may disclose your information, including personally identifiable information, to our vendors, service providers, agents, or others who perform functions on our behalf.”
For example, a payment company can get billing details when you buy something.
They describe basic security such as firewalls, passwords, and encryption in transit.
Read the exact line
Privacy policy
“We maintain appropriate administrative, technical, and physical security measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, misuse, and any other unlawful processing of Personal Data in our possession.”
For example, they say they use TSL when data travels over the internet.
Deletion and copies are by contacting them, not a simple in-app button described here.
Read the exact line
Privacy policy
“If you wish to receive a copy of, access or correct any personal data we hold about you, or to request that we delete any information about you, you may contact us as indicated in the “How to contact us” section.”
For example, you email rgpd@orbys.eu and send a signed form plus a copy of your ID.
Logged-in browsing is tied to your account so they can recommend products.
Read the exact line
Privacy policy
“In this way, we can personalize the offer of products and/or services that, in our opinion, best suit the user, as well as recommend certain products and/or services.”
For example, pages you visit while logged in can shape what they pitch you later.
Words to know
Legal words from the lines above, in plain English.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- tracking pixels
- Tiny invisible images or bits of code in a page, app or email that report back when and where you opened it. For example, a pixel in a marketing email tells the sender the moment you read it.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
How we got here · grade F · score 33/100 · 15 of 15 policy answers backed by a verified quote · 7 not stated
What does the app collect beyond what it needs to work?
They collect account and billing data plus cookies, device IDs, managed-device hardware, apps, location, GPS in lost mode, images, and ID numbers.
Does it record your voice, face or body, and what happens to that?
School apps process user images (and other ID data) as part of the service; the policy does not say they are deleted after a session.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They and partners use cookies, pixels, and beacons to deliver targeted ads and gather demographics.
Do they sell or share your data, and can you opt out?
They say they never sell personal data, but they share it with service providers and in business transfers.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
You request deletion by email; after account deletion they still keep transaction data for 10 years, and contact-form data for 3 years.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They tie browsing to your registration to personalize offers; they do not describe viewing or turning that off.
Do they commit to basic security, and have they leaked data?
They describe industry-standard measures such as firewalls, password protection, and TSL encryption, but no independent audit.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The policy is dated; registered users get an email, but they also say continued use means you accept the new version.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 3,843 words at a professional or legal expert level (Flesch reading ease 7.3).
