Legal
The documents that govern your use of ShellOrbit, written to be read rather than skipped.
Four documents cover the whole relationship. The terms set the rules, the privacy policy explains what we hold, the data processing addendum covers the data your own users generate, and the refund policy explains how billing ends. Two more sit alongside them: the responsible disclosure policy, for reporting a security problem, and the hall of fame, for the people who have.
- Terms of Service. The agreement between you and ShellOrbit for use of ShellOrbit, including acceptable use, billing, uptime, and liability.
- Privacy Policy. What ShellOrbit collects, why it holds it, how long it keeps it, who processes it, and how to get it back or deleted.
- Data Processing Addendum. How ShellOrbit processes the personal data inside your webhook payloads as your processor, with security measures, subprocessing rules, breach notification, and transfer terms.
- Refund Policy. Fees paid are not refunded. This page explains why, what Paddle's role means for you, which statutory rights survive that rule, and the narrow cases where we do return money.
- Subprocessors. Every third party that touches your data, what it does, and what it receives. This page forms Annex III of the data processing addendum.
- Responsible Disclosure Policy. How to report a vulnerability in ShellOrbit, what we ask of you while you do, and what you can expect from us once you have. No paid bounty, but every valid report is credited.
- Security Hall of Fame. The researchers who have reported a valid vulnerability in ShellOrbit and chosen to be named. This is the whole reward we can offer, so we take it seriously.