Privacy Policy

Information we collect

We collect the information you provide directly, such as your name, phone number, email address, and the contacts and connections you choose to import: from LinkedIn, Google, Apple Contacts, Apple Calendar or a CSV file. With your permission, we also process data from the accounts you connect to build your network and surface warm introduction paths. Orbit also researches the people in your network from public and professional sources, as described below.

Data protection

We treat contact, calendar, and email data as sensitive. Orbit protects that data with the following mechanisms:

• Encryption in transit: all data exchanged between your devices and Orbit travels over TLS.
• Encryption at rest: stored account data, imported contacts, calendar interactions, Gmail data, and OAuth tokens are encrypted at rest on our managed cloud infrastructure.
• Account isolation: each user’s data is isolated with row-level access controls so one Orbit account cannot read another account’s network.
• Least privilege: we request the narrowest OAuth scopes needed for the features you turn on. For Gmail, that means message headers via gmail.metadata, or, only if you allow Orbit to read email content, read-only access via gmail.readonly, from which Orbit keeps only the facts it finds, never the message text (see Google user data below). Sending email uses gmail.send, which can send but can’t read your mail.
• Access control: OAuth tokens and imported Google user data are stored on protected servers, used only to sync the features you authorize, and are not sold or shared with other Orbit users except as described in this policy. Internal access is limited to what is needed to operate and secure the service.
• User controls: you can disconnect Google, revoke access in your Google account permissions, delete imported contacts, or delete your Orbit account at any time.

Additional detail is available on our Security page.

How we use information

We use your information to provide and improve the product, map relationships across your network, suggest introductions, secure your account, and communicate with you about your account and the service.

Research about you and the people you know

Orbit may use public sources to research your professional background and build your self-profile. That research stays private unless you turn on Share my profile; when sharing is on, Orbit may use it to complete your details for another Orbit user who already has you in their network.

Orbit also researches the people in your network, so their cards show things like where they work, their role, their school and their city. To do this, Orbit sends details of a contact, such as their name, email address, phone number, LinkedIn profile, company and city, to the research and data providers listed under “How we share information”, and uses AI model providers to read and summarize what they find. Orbit may also keep watching your contacts for public changes, such as a new job. Research about a person comes from public and professional sources and can be saved and reused when another Orbit user has the same person, matched by their LinkedIn profile or email address. Your notes, tags, and how you know someone are never part of that research.

People who came into your Orbit only from your Apple Calendar are never researched automatically, and Orbit doesn’t use AI to prepare meeting briefs about them: a brief about them shows only what you already have. Orbit looks one of them up only when you ask Orbit to look them up yourself.

Orbit also derives private, owner-scoped signals from search actions, such as topics and results that appear useful, to improve ranking for your account. This is on by default; you can turn it off under Privacy & security → Location & data use → Personalize search.

How we share information

We do not sell your personal information. We share data with service providers who process it on our behalf, only as needed to run Orbit:

• Hosting and infrastructure: Supabase (database, sign-in and storage) and Vercel (hosting).
• AI model providers: Anthropic, OpenAI, Cohere and ElevenLabs, reached through the Vercel AI Gateway, which routes only to providers that don’t train on the data. They power Orbit chat, meeting briefs, research summaries, search (your contacts’ details, including meeting titles, are indexed for your private search), voice transcription, and the other features described in this policy.
• Research and data providers: Crustdata, Exa, People Data Labs, Parallel, Bright Data, Serper, FullEnrich and X for people and companies, plus Gravatar and Logo.dev for photos and logos, and Apple Maps for places.
• Messages and notifications: Twilio and Sendblue (texts Orbit sends you), Resend (email), and Expo (push notifications).
• Reliability and product quality: Sentry (error reports), PostHog (app analytics) and LangSmith (chat quality), described below.
• Identity verification: Stripe, when you choose to verify your identity.

We may disclose information if required by law.

In the iPhone app, Orbit uses PostHog for product analytics while you are signed in: which screens you open and a session recording of taps in which text fields and images are hidden. Recording runs only on a short list of screens with no information about people, such as sign-in and some settings pages; every other screen, and any sheet, banner or message about a person, is never recorded. This data is linked only to your Orbit account id, never your contacts, notes or messages. It is on by default; you can turn it off on each iPhone under Privacy & security → Location & data use → Share usage analytics.

LangSmith (LangChain, Inc.) helps us check and improve answer quality in Orbit chat. For each chat request it receives the steps Orbit took to answer. Before sending, we replace names, email addresses, phone numbers and profile links with placeholders and remove your saved notes; some details can occasionally get through. Nothing outside chat is sent. It’s kept for 14 days. A chat that gets a quality rating can be kept for up to 180 days.

Your network is private by default. If LinkedIn mutuals is on (Privacy & security → Sharing), people who already have you saved in Orbit may see which first-degree LinkedIn connections you both have and use them for warm-introduction suggestions. People you share your Orbit with always see this overlap. Orbit shows the names, roles, companies and photos they already have for those people, but not phone numbers, email addresses, notes, or your private address book. You can turn this off at any time.

If you share your Orbit with someone, they can find people in it and see that they come through you, with their professional details only (such as name, photo, title, company, school and city), never your notes or their contact details. They, and people who ask you for an introduction, may also see roughly how strong your connection with someone is. That strength is worked out from how often and when you interact across Orbit and the accounts you connected, including the counts and dates of your emails and meetings, never their content.

Mutual connections are on by default. When someone who has you in their Orbit, and whom you have in yours, or someone you share your Orbit with, looks at a person’s profile in Orbit, they may see you listed as a mutual connection, but only when you have that person by their LinkedIn profile: they are in your LinkedIn connections, or your contact for them carries their LinkedIn profile, added by you or found by Orbit. A shared email address or phone number alone never makes you a mutual connection, and neither does a name. The listing has a coarse label for how well you know that person: Close, Knows well or Knows, from the relationship level you set or, if you haven’t set one, from how often you’re in touch, and a short note on how you know them (“Talk often”, “Recently met” or “Connected since” a year). Both are worked out from how often and when you interact across Orbit and the accounts you connected: your Orbit messages, the dates and counts of your emails and meetings with them, introductions Orbit found in your email if you let it read email content, their job title, an assistant who emails for them, when you first had them, and when you connected on LinkedIn. Orbit shows only the label and the short note, never the content of your messages, emails or meetings, and never what you wrote. They see only your name and photo as they already have them, never your contacts, connection list, notes or contact details, and nobody is notified. You can turn this off at any time under Privacy & security → Show me as a mutual connection.

LinkedIn network search is on by default. If you imported your LinkedIn connections, people who have you in their Orbit, and whose LinkedIn import and yours list each other, may find people from your LinkedIn connections when they search, on company, school and city pages, and in Orbit chat, shown as coming through you. They see only that person’s professional profile (name, photo, title, company, school, city and LinkedIn profile), which can include what Orbit’s research found, and your name and photo as they already have them, never your contacts, email addresses, phone numbers, or notes, and nobody is notified. You can turn this off at any time under Privacy & security → Sharing → Let my LinkedIn connections find people through me.

Orbit contacts who are also Orbit users may see your online and last-seen status. This setting is on by default and can be turned off under Privacy & security → Sharing → Share last seen; when it is off, Orbit shows only an approximate activity range rather than your precise activity, and you see the same for others.

Connected accounts

When you connect a third-party account, we request only the access needed to import your contacts, the people you meet with, and—when you explicitly authorize Gmail—the people you exchange email with. You can disconnect a connected account at any time, and we honor the data-handling requirements of each platform we integrate with.

Apple Contacts on iPhone

When you connect Apple Contacts in the Orbit iPhone app, we upload your contacts (names, phone numbers, email addresses, company, job title, birthday, photo, related people, social profiles, links, and the notes saved on them) to your private Orbit account to create or match contacts. We do not create, edit, or delete contacts on your iPhone, and we do not notify the people you import.

When you import your iPhone contacts, Orbit uses an AI service to read the notes on those contacts and suggest tags, where you met, connections between people you know, and dated reminders. What it learns stays in your private Orbit and isn’t shared with other users. Orbit does this only after you allow it in the app; it is off until you do. The AI service is a third-party AI model provider that processes the notes on our behalf to return these suggestions. You can turn it off at any time under Privacy & security (“Use AI to read imported contact notes”), which stops Orbit sending notes, and you can remove what Orbit learned from notes there too.

Notes and tags you write

When you speak or type a note or tag about someone in Orbit (Remember), Orbit’s AI sorts what you said into a note and tags, using a third-party AI model provider that processes it on our behalf. If you speak it, a speech-to-text provider (ElevenLabs or OpenAI) transcribes the recording, which isn’t kept. Nothing from that step is kept except what you choose to save. Your notes and tags are private to you: they are never shown to the person, to anyone who introduced you, or to anyone you share your Orbit with, and Orbit never writes them to your iPhone contacts. You can undo a save, and delete any note or tag at any time.

Apple Calendar on iPhone

When you connect Apple Calendar in the Orbit iPhone app, we request full calendar access so we can scan the calendars on your device from the last 12 months and the next 30 days, including event titles, dates, and attendee and organizer names and email addresses when available. We upload that data to your private Orbit account to create or match contacts and build a private meeting timeline. We don’t upload event descriptions, locations or notes. When you open the app, Orbit also checks today’s and tomorrow’s meetings to send meeting briefs and check-ins. If you turn on location reminders, Orbit reads event locations on your iPhone and uploads only the city and dates of your trips. We do not create, edit, or delete calendar events, and we do not notify attendees.

Meeting titles are used in your private search, in Orbit chat and in meeting briefs, so they are processed by our AI model providers. People who came only from your Apple Calendar are never researched automatically, and no AI-written meeting brief is made about them. You can stop future access anytime in iOS Settings; revoking access does not delete data you already imported.

Google user data

When you connect a Google account, Orbit requests read-only access to .../auth/contacts.readonly and .../auth/calendar.readonly. If you choose to connect Gmail, Orbit also requests .../auth/gmail.metadata or, if you allow Orbit to read email content, .../auth/gmail.readonly. If you turn on meeting notes from Google, Orbit also requests .../auth/documents.readonly. We use Contacts (People API) to read your saved contacts (name, email, phone, company, job title, school, birthday, website and LinkedIn links, and photo) so we can populate your private contact list. We use Calendar to read events on your primary calendar (title, start and end time, location, organizer, and attendee names and emails; for an upcoming meeting, also its description and the names of attached files) so we can identify the people you meet with, build a private “last met” interaction timeline, prepare meeting briefs and check-ins, and, if you turn on location reminders, spot your trips. We request read-only access to these and never create, edit, or delete your contacts, calendar events, or email. The one thing Orbit may do in Gmail, if you allow it, is send an email you approved (below).

Event titles are used in your private search and in Orbit chat, and event titles and descriptions are used to prepare meeting briefs, so they are processed by our AI model providers.

With Gmail metadata, Orbit reads the From, To, Cc, Subject, and Date headers of recent messages, plus a few technical headers: mailing-list headers to skip bulk mail, and the Sender and X-Failed-Recipients headers, used to record bounced addresses and to link an assistant who emails on someone’s behalf. We use those headers to identify people you exchange email with and add subject-and-date interactions to your private contact timeline; subjects can appear in your meeting briefs. With Gmail metadata, Orbit cannot read message bodies or attachments. Google OAuth tokens and imported Gmail data are stored on Orbit’s protected servers so the connection can sync the features you authorize.

Email content. If you allow Orbit to read email content, Orbit reads recent messages read-only to find a few kinds of facts: details in people’s email signatures (such as title, company, phone and links), introductions between people, and your travel and event bookings. Orbit keeps only those facts, never the message text, and doesn’t open attachments. This reading is done by Orbit’s own code, not an AI model. If you also turn on meeting notes from Google, Orbit reads your Google meeting notes (the notes email or Google Doc) and sends their text to an AI model provider to write a short private note and reminders about each person in the meeting.

Sending email. If you allow it, Orbit can send an email from your Gmail account (https://www.googleapis.com/auth/gmail.send). Orbit sends an email only when you approve that exact email in Orbit Chat, to the person it shows, and never on its own or in bulk. This permission can’t read your mail. Orbit doesn’t keep a separate copy of the emails it sends for you; the draft you approved stays in your Orbit chat history. You can turn it off by disconnecting Google in Orbit or at myaccount.google.com/permissions.

Google Drive in Messages: when you choose Google Drive in a chat’s attach menu, Google’s own file picker opens and Orbit requests .../auth/drive.file, which reaches only the files you pick there, never the rest of your Drive. Orbit reads each picked file’s name, type, and size and downloads a copy to your iPhone (Google Docs, Sheets, and Slides as PDF or Excel files). That copy is sent to the people in that chat only after you tap Send, exactly like a file from your phone. Orbit does not store this Drive access, revokes it as soon as the copies are downloaded, and never changes the file’s sharing settings in Drive, so the people you message get the copy you sent, not access to your Drive.

Orbit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the user-facing features described above; we do not sell it; we do not use or transfer it for serving advertisements; we do not use it to develop, improve, or train generalized or non-personalized AI and/or machine learning models; and we do not allow humans to read this data unless we first obtain your affirmative consent, it is necessary for security purposes (such as investigating abuse) or to comply with applicable law, or the data has been aggregated and anonymized. Each user’s Google data is private to that user and is not shared with other Orbit users, except: a Google Drive file you choose to send in a chat; trips or event plans you choose to share with people you share your Orbit with; and how often and when you email or meet someone (counts and dates only, never content), which can shape the closeness label, note and connection strength that people who know you, or whom you share your Orbit with, may see. You can turn the mutual connection part off under Privacy & security → Sharing → Show me as a mutual connection.

Google user data is never used to train generalized or non-personalized AI models. Gmail data is not used for advertising or sold.

You can revoke Orbit’s access at any time from your Google account permissions. Disconnecting Google in Orbit or revoking access stops future collection. You can also remove imported contacts in Orbit or delete your Orbit account.

Microsoft Outlook

The Outlook connection isn’t available to everyone. If you connect a Microsoft account, Orbit requests read-only access (Contacts.Read and Calendars.Read) and reads your contacts’ names, emails, phone numbers, company and job title, and your calendar events’ subject, start time, organizer and attendees. Orbit uses them the same way as your Google contacts and calendar. Data from an Outlook account you connected stays in your private Orbit until you disconnect it, delete those contacts, or delete your Orbit account.

CSV file upload

When you upload a CSV file, Orbit reads names, email addresses, phone numbers, company, job title, LinkedIn link and location. When Orbit recognizes the file’s column headers, only those columns are uploaded. When it doesn’t, Orbit sends the first 12 rows, with each cell shortened, to an AI model provider to work out which column is which. People you import from a file are researched like your other contacts.

Apple Messages

Orbit is an iPhone app and does not read your iMessage or SMS threads. If you connected Messages in the former Orbit Mac app, the short snippets and summaries it saved stay in your private Orbit, where they can appear in contact timelines and search, until you delete those contacts or your Orbit account. We do not send messages on your behalf.

LinkedIn and other connections

If you connect LinkedIn, Orbit uses your LinkedIn password only to sign in while you connect (it may retry within that sign-in) and never stores it. If you sign in to LinkedIn on your iPhone, the LinkedIn session stays on your iPhone. Otherwise Orbit keeps your LinkedIn email and an encrypted LinkedIn session on its servers. Orbit uses the session to import your connections, check for new ones, and confirm your own LinkedIn profile, which it uses to research your self-profile and to recognize you when other people’s contacts point to your LinkedIn profile. For each connection, the import reads their name, headline, photo, location, LinkedIn profile link and the date you connected. Importing your connections never notifies them. Your imported connections are researched like your other contacts. Orbit deletes the stored session and email when you disconnect LinkedIn. Orbit no longer connects to Instagram; people imported from Instagram earlier stay in your private Orbit until you delete them or your Orbit account. Orbit does not send messages on your behalf. You can disconnect any connection to stop future syncs.

Data retention and deletion

We retain your information, including search prompts and Orbit chat history, while your account is active so you can revisit prior work and Orbit can provide the service. You can delete contacts at any time and delete your account and associated data from the product or by contacting us. Disconnecting a connected Google account stops future imports. If you choose “remove contacts” while disconnecting, Orbit removes contacts whose sole source was that Google connection; contacts also supported by another source are kept. Deleting your Orbit account deletes the associated Google-derived contacts, calendar interactions, Gmail metadata interactions, and stored connection tokens from our systems.

Text messages

Orbit texts your phone number only for codes you ask for and one text when you’re let in off the waitlist. Never marketing. Reply STOP to opt out. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Details are at orbit.my/sms.

Your choices

You can access, update, or delete your information from within the product, and you can revoke access to connected accounts at any time.

Anyone, Orbit user or not, can ask Orbit to hide them in other people's Orbits (from search, sharing, the map and counts), delete the research Orbit saved about them, and stop looking them up, on our removal page. We confirm the request with a one-time code sent only to the email or phone being removed, keep only one-way hashes of it (and of the request’s IP address) so it is never researched again, and never tell the requester who had them as a contact.

Contact us

If you have questions about this Privacy Policy or your data, contact Pluto Insights Inc. at privacy@orbitmy.co.