Privacy Notice

Last updated 2026-08-26

Introduction

This Privacy Notice for Gamgee Labs Private Limited ("we," "us," or "our") describes how and why we collect, store, use, and share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://answerorbit.app or any page of ours that links to this Privacy Notice
• Subscribe to State of AEO, our weekly newsletter
• Use AnswerOrbit — an AI search visibility tracker that runs the prompts you choose against AI assistants and reports how often your brand appears (accounts open at launch)
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, contact us at hey@answerorbit.app.

Summary of Key Points

This summary provides key points from our Privacy Notice. You can find out more details about any of these topics by using the table of contents below.

What personal information do we process?

Today: your email address if you subscribe to the newsletter, and what you write when you email us. At launch: account details and the brands and prompts you choose to track. Learn more in Section 1.

Do we process any sensitive personal information?

We do not process sensitive personal information.

Do we collect any information from third parties?

We do not collect any information about you from third parties.

How do we process your information?

To provide and administer our Services, communicate with you, for security, and to comply with law. We process your information only when we have a valid legal reason to do so. Learn more in Sections 2 and 3.

In what situations and with which parties do we share personal information?

With the two companies that host our systems and send our email, listed in Section 4. We do not sell personal information. Learn more in Section 4.

How do we keep your information safe?

We have organizational and technical processes in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Learn more in Section 8.

What are your rights?

Depending on where you are located, the applicable privacy law gives you rights over your personal information. Learn more in Section 10.

How do you exercise your rights?

Email us at hey@answerorbit.app. We consider and act upon any request in accordance with applicable data protection laws.

Table of Contents

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. What Legal Bases Do We Rely On?
4. When and With Whom Do We Share Your Personal Information?
5. Do We Use Cookies and Other Tracking Technologies?
6. Is Your Information Transferred Internationally?
7. How Long Do We Keep Your Information?
8. How Do We Keep Your Information Safe?
9. Do We Collect Information From Minors?
10. What Are Your Privacy Rights?
11. Controls for Do-Not-Track Features
12. Do We Make Updates to This Notice?
13. How Can You Contact Us About This Notice?
14. How Can You Review, Update, or Delete the Data We Collect From You?

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you subscribe to the newsletter, register on the Services, or otherwise contact us. Today that is:

• Your email address and the time you subscribed — when you type it into the subscribe field and press the button
• A count of page views per page per day — a number only — when a page loads
• Your email and what you write when you email us — when you write to hey@answerorbit.app

When accounts and paid plans open, it will also be:

• Your name, email, password hash, and the brands, competitors and prompts you choose to track
• Your billing name, address, country and payment method

Sensitive information

We do not process sensitive information.

Payment data

At launch, payment is handled by our merchant of record, Polar. Polar collects the data necessary to process your payment, such as your payment instrument number and billing address; we never see your card number. Polar's privacy notice is at https://polar.sh/legal/privacy.

Information automatically collected

In Short: A count of page views, and nothing that identifies you.

When you visit the website, we record a count of page views per page per day. We do not record IP addresses, device identifiers, or cookies, so this count cannot be tied to you.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security, and to comply with law.

• To send you the State of AEO newsletter on Mondays. We process your email address and the time you subscribed for this purpose.
• To know which pages people read. We process a count of page views per page per day — a number only for this purpose.
• To answer you. We process your email and what you write when you email us for this purpose.
• To facilitate account creation and deliver the Services (at launch). We will process your account details, brands and prompts so you can log in and receive your weekly checks.
• To protect our Services. We process server request logs as part of our efforts to keep our Services safe and secure.
• To comply with our legal obligations. We process information to respond to legal requests and to keep the invoice records tax law requires.

3. What Legal Bases Do We Rely On?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (that is, a legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, the GDPR and UK GDPR require us to explain the valid legal bases we rely on:

• Your email address and the time you subscribed: Consent — you asked for the letter. Withdraw it any time by unsubscribing.
• A count of page views per page per day — a number only: Legitimate interest in knowing whether the site is read. No cookie, no IP address, no identifier is stored, so no one can be singled out.
• Your email and what you write when you email us: Legitimate interest in answering the people who write to us.
• Your name, email, password hash, and the brands, competitors and prompts you choose to track: Performance of the contract — the service cannot run without it.
• Your billing name, address, country and payment method: Performance of the contract; tax law requires the invoice records to be kept.
• Legal obligations. We process your information where necessary to comply with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation.

If you are located in India, we process your personal data as a data fiduciary under the Digital Personal Data Protection Act, 2023, on the same bases.

4. When and With Whom Do We Share Your Personal Information?

In Short: We share information with the vendors that run our systems, and in the specific situations described below.

Vendors, consultants, and other third-party service providers. We share your data with third-party vendors that perform services for us and require access to such information to do that work. They are bound by written data-processing terms. The categories of third parties we share personal information with are:

• Railway Corporation — hosts this website and our database; holds all the data on the privacy page, plus server request logs; United States (San Francisco region).
• Resend, Inc. — sends the welcome email and the letter; holds your email address and the email text; United States.
• Polar Software Inc. (merchant of record, at launch) — payment processing and invoicing.

We tell newsletter subscribers and account holders by email before adding or replacing a subprocessor. We also share information in these situations:

• Business transfers. We share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal requirements. We disclose your information where we are legally required to do so, and we tell you unless the law forbids it.

We do not sell or rent personal information, and we do not share it for advertising.

5. Do We Use Cookies and Other Tracking Technologies?

In Short: No.

This website sets no cookies and uses no tracking pixels, analytics scripts, or advertising technologies. The page counter described in Section 1 stores a number per page per day and nothing about you. At launch, the product application will use a strictly necessary session cookie to keep you logged in; this notice will be updated before then.

6. Is Your Information Transferred Internationally?

In Short: Yes. Our systems run in the United States; we are a company in India.

Our servers and database are hosted by Railway in the United States (San Francisco region), and our email is sent by Resend from the United States. Gamgee Labs Private Limited is located in India. If you are accessing our Services from the EU, UK, or elsewhere, your information is transferred to, stored in, and processed in these countries. Where required, transfers are protected by the standard contractual clauses in our vendors' data-processing agreements. You can request a copy at hey@answerorbit.app.

7. How Long Do We Keep Your Information?

In Short: We keep your information only for the periods listed below, unless the law requires us to keep it longer.

• Your email address and the time you subscribed: Until you unsubscribe; deleted within 7 days of that.
• A count of page views per page per day — a number only: Kept as aggregate history; it is not personal data once counted.
• Your email and what you write when you email us: Kept while the conversation is useful; deleted on request.
• Your name, email, password hash, and the brands, competitors and prompts you choose to track: For the life of the account and 30 days after you close it.
• Your billing name, address, country and payment method: As long as tax law requires invoice records (typically 7–10 years).

When we have no ongoing legitimate business need to process your personal information, we delete or anonymize it, or, if this is not possible (for example, because it is held in backup archives), we securely store it and isolate it from any further processing until deletion is possible.

8. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

Our database is reachable only from inside our hosting network; the website talks to it over a private link. Connections to the website are encrypted (TLS). Access to the accounts that run the service is limited to the founder and protected with two-factor authentication. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security. If a breach affects your personal information we will tell you, and where the law requires it we will notify the supervisory authority within 72 hours.

9. Do We Collect Information From Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

The Services are for people acting on behalf of a business, aged 18 or over. By using the Services, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will delete it promptly. If you become aware of any data we have collected from children under age 18, contact us at hey@answerorbit.app.

10. What Are Your Privacy Rights?

In Short: Depending on your location, you have rights that allow you greater access to and control over your personal information. You can review, change, or terminate your account at any time.

In the EU, UK, and other regions with similar laws, you have the right to:

• Access — ask what we hold about you and get a copy.
• Rectification — have it corrected.
• Erasure — have it deleted, where the law lets us.
• Restriction — ask us to stop using it while a question is settled.
• Objection — object to processing based on legitimate interest.
• Portability — receive your data in a machine-readable form.
• Withdraw consent — at any time, for anything based on consent.
• Complain — to your national data-protection authority (in the EU, the list is at edpb.europa.eu).

To make a request, contact us at hey@answerorbit.app from the email address in question. We respond within 30 days, usually within a week.

Withdrawing your consent

Where we rely on your consent, you can withdraw it at any time by unsubscribing (reply to any issue with the word "unsubscribe") or by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.

Opting out of marketing

Our only marketing communication is the newsletter you asked for. Unsubscribe at any time as above.

Automated decision-making

We do not make automated decisions about you and do not profile you.

11. Controls for Do-Not-Track Features

Most web browsers include a Do-Not-Track ("DNT") feature or setting. Because this website does not track visitors at all, there is nothing for a DNT signal to switch off; we treat every visitor as if DNT were on.

12. Do We Make Updates to This Notice?

In Short: Yes, we update this notice when our data flows or the relevant laws change.

The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes, we notify newsletter subscribers by email before the changes take effect. Change history:

• 2026-08-26 — Rebuilt on the controller's established notice form (as at gamgee.ai/privacy-policy: summary of key points, table of contents, fourteen numbered sections) with AnswerOrbit's facts from the register of data flows; controller named (Gamgee Labs Private Limited); subprocessors page added.
• 2026-08-18 — First version: newsletter email and the page counter.

13. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, email us at hey@answerorbit.app or write to us by post at:

Gamgee Labs Private Limited
43 Anusthan Bungalows, Sola Science City Road, Sola, Ahmedabad, Gujarat 380060, India

We have not appointed a data protection officer; the founder answers privacy requests.

14. How Can You Review, Update, or Delete the Data We Collect From You?

You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete it. To request to review, update, or delete your personal information, email hey@answerorbit.app.