Privacy Policy

To run the service, we collect:

• Account information: your name, email address, and password (hashed — we never see it in plaintext)
• Contact data you enter: names, companies, notes, interaction logs, reminders — everything you choose to add
• Usage data: which features you use, when, and on what device — used only to improve the product
• Technical data: IP address, browser type, and error logs for debugging

These are absolute rules at Orbit, not subject to business pressure:

• We never sell your data to anyone, for any reason
• We never share your contact data with third parties
• We never use your data to train AI or machine-learning models
• We never show you ads or build advertising profiles

We use your data exclusively to provide and improve Orbit:

• Delivering features: syncing your data across devices, sending reminders
• Product improvement: understanding which features are used to prioritize what to build next
• Security: detecting and preventing unauthorized access
• Communication: sending product updates and service notices (you can unsubscribe from marketing emails at any time)

Your data is stored on Supabase infrastructure with encryption at rest and in transit. We use row-level security to ensure no user can access another user's data. We conduct regular security reviews and follow responsible disclosure practices.

Orbit uses a minimal set of trusted third-party services:

• Supabase — database and authentication (EU/US data centers)
• Vercel — hosting and edge delivery
• Stripe — payment processing (we never see your full card number)

You have full control over your data:

• Export: download everything you've added to Orbit at any time
• Delete: permanently delete your account and all associated data — takes effect within 30 days
• Correction: update any information directly in the app
• Portability: your exported data is in standard JSON format, readable by any tool

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies. You cannot meaningfully use Orbit without essential cookies.

Orbit is not directed at children under 16. If you believe a child has created an account, contact us at privacy@get-orbit.app and we will delete it promptly.

We will notify you by email at least 14 days before any material changes to this policy take effect. The "last updated" date at the top always reflects the most recent revision.

Privacy questions deserve real answers. Email us at privacy@get-orbit.app — we respond within 2 business days.