Privacy Policy

Last updated: 4 July 2026

The short version

Orbit is local-first. Your code, your repositories, and your AI-provider API keys live on your machine and never pass through our servers. AI requests go directly from your machine to your chosen provider.

What we collect, free desktop app

Nothing. The free app requires no account and sends us no telemetry (telemetry is off by default in Settings).

What we collect, Orbit Cloud (Pro)

• Account: your name, email, and (if you use OAuth) your GitHub/Google account id.
• Synced metadata: project names, workspace names and statuses, task titles, the minimum needed for cross-device sync and remote control. Not your source code.
• Push subscriptions: if you enable notifications, the browser push endpoint for your device.

Payments

Checkout is handled by Paddle (Paddle.com Market Ltd), our Merchant of Record. We never see or store your card details; see Paddle's privacy policy. We store your subscription status and Paddle customer id to unlock Pro features.

Where data lives

Cloud data is stored with our hosting providers (Supabase/PostgreSQL and Google Cloud). Payment webhook records and admin actions are retained as an audit trail.

Your rights

Email us to export or delete your account data at any time. Deleting your account removes synced metadata; invoices held by Paddle are retained as required by tax law.

Contact

Data controller: Rajveer Patel
rajveerpatel.2450@gmail.com