1. Scope
This policy explains how Angelic, the operator of Orbit ("Orbit," "we," "us," or "our"), handles information when you visit our website, create an Orbit account, purchase a plan, or use the Orbit desktop application.
2. Information we handle
- Account information: your Google account identifier, name, email address, and authentication records.
- Information you provide: profile details, résumé content, recruiting or networking preferences, campaign instructions, corrections, and feedback.
- Mobile-to-desktop handoff data: when you start on a phone, we may store the email address, recruiting goal, optional detail, campaign/source attribution, and an opaque browser-session identifier needed to save your place, deliver the continuation link, and measure where the setup flow succeeds or drops off.
- Local application data: campaign history, prospects, drafts, activity, and connected-site browser sessions stored on your device.
- Service and usage data: plan, credit usage, feature activity, technical logs, device and app version information, and records used for reliability, security, and abuse prevention.
- Billing information: customer, transaction, and subscription status received from Stripe. Orbit does not receive or store your complete payment-card number.
- Professional information: information from professional pages that you direct Orbit to research, plus names, employers, and profile links used for work-email discovery.
3. How we use information
We use information to provide the actions you request, personalize drafts, maintain your account and credits, authenticate users, process subscriptions, provide support, investigate failures, secure the service, prevent abuse, understand product performance, and meet legal and accounting obligations.
4. Local browser sessions
Orbit uses a separate browser profile on your device for connected services such as LinkedIn and Gmail. You sign in directly with those services. Orbit does not receive your LinkedIn or Gmail password. Session cookies and local campaign data remain on your device unless a feature clearly states that information is being sent for processing.
5. Service providers
We use service providers only where needed to operate Orbit. These may include Google for sign-in, Stripe for payment processing and subscription management, Railway for service hosting, Alibaba Cloud DashScope/Qwen for AI processing, Apollo.io for professional email discovery, GitHub for downloads and software updates, and a transactional email provider when email handoff delivery is enabled. Each provider processes information under its own terms and privacy commitments.
6. AI processing and professional data
To perform a requested task, relevant portions of your profile, instructions, and a prospect's professional information may be sent through our backend to an AI provider. A prospect's name, employer, and professional profile link may be sent to an email discovery provider. We do not use your résumé or outreach content to train our own models, and our backend is not designed to retain complete request bodies as a customer-content archive.
7. Sharing and sale
We do not sell personal information. We may disclose information to service providers, professional advisers, authorities where legally required, or as part of a business reorganization, subject to appropriate safeguards.
8. Retention
Local application data remains on your device until you remove it. Mobile-to-desktop handoff links expire after 14 days. The raw email address, recruiting goal, optional detail, browser-session identifier, and account linkage held specifically for that handoff are removed or de-identified after 30 days; source and timestamp information may remain in de-identified funnel records so we can measure product conversion. Account, billing, credit, security, and operational records are retained while your account is active and afterward for the period reasonably needed for support, fraud prevention, accounting, tax, dispute resolution, and legal compliance. We delete or de-identify information when it is no longer needed, subject to legal obligations and backup cycles.
9. Security
We use reasonable technical and organizational safeguards designed to protect information. No service is completely secure, and you are responsible for protecting access to your device and connected accounts.
10. International processing
Orbit and its providers may process information in countries other than your own. Where required, we use appropriate legal mechanisms for international transfers.
11. Your choices and rights
You can edit profile information, sign out, disconnect local browser sessions, and remove local application data. Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, or object to certain processing. To make a request, email lw3405@nyu.edu. We may need to verify your identity.
12. Children
Orbit is not directed to children under 16. If you believe a child provided personal information without appropriate permission, contact us.
13. Changes
We may update this policy as Orbit or legal requirements change. We will post the new version here and update the date above.
14. Contact
For privacy questions or requests, contact lw3405@nyu.edu.