Privacy Policy

Last updated: 17 August 2026

xOrbit ("we", "us") provides unlimited-data V2Ray access for Sri Lanka. This page explains what we collect, why, and what we do with it.

What we collect

• Account info: your email address, and a hashed password (we never store your password in plain text). If you sign in with Google or Discord, we receive your verified email from them and nothing else.
• Payment info: the bank transfer slip image you upload to confirm payment, and basic invoice details (plan, amount, date). We do not collect or store card numbers — payment happens directly between you and your bank.
• Usage data: how much data your connection has used, tracked by our node so we can show it to you and keep the service running. We do not log which sites or apps you use.
• Server logs: standard web server logs (IP address, timestamp, page requested) kept briefly for security and debugging.

What we don't do

• We don't sell or share your data with advertisers.
• We don't inject ads or trackers into your connection.
• We don't log your browsing activity through the VPN.

Who else sees it

Your payment slip and account details are only visible to xOrbit's operator (Jake) for the purpose of confirming payment and provisioning your service. If you choose Google or Discord sign-in, that provider handles authentication on their end per their own privacy policy.

How long we keep it

We keep your account and invoice records for as long as your account is active, plus a reasonable period afterward for our own records. You can ask us to delete your account and data at any time by messaging us on WhatsApp.

Your rights

You can ask to see, correct, or delete the data we hold on you at any time. Message us on WhatsApp and we'll handle it directly.

Contact

Questions about this policy: message xOrbit on WhatsApp.