Privacy Policy

OrbitaAI is an early-access personal organization product. This policy explains what we collect through this website, the early-access waitlist, and the contact form — and the choices you have. We've written it in plain language on purpose.

The full product is not yet generally available. This policy will be updated before launch to cover in-product data processing, and we will ask you to review the updated policy at that time.

This policy applies to:

• This website and its pages
• The early-access waitlist
• The contact form and emails you send to our team
• Basic server logs created when you visit the site

It does not apply to third-party websites or services we link to. Those services have their own privacy policies.

Information you give us

• Waitlist: your email address, the date and time you joined, and your consent status.
• Contact form: your name, email address, chosen topic, message, consent confirmation, and submission time.
• Email: anything you choose to include when you write to us.

Information collected automatically

• Server logs: IP address, browser user agent, requested URL, and timestamps, generated by our hosting provider for security, abuse prevention, and reliability.

We do not ask for your date of birth, precise location, health information, contacts, or document uploads on this website. Please do not send sensitive documents through the contact form.

• To add you to the early-access list and contact you when an invite is available
• To reply to your message and provide support
• To protect the site against abuse, spam, and security threats
• To understand, in aggregate, which parts of the site are useful — without profiling you
• To comply with legal obligations

We do not sell your information, use it for advertising, or use your private documents or messages to train AI models.

Where data protection law requires a legal basis, we rely on:

• Consent — for the waitlist and contact submissions. You can withdraw consent at any time.
• Legitimate interests — for operating and securing the website, preventing abuse, and responding to inquiries.
• Legal obligation — where we must retain or disclose information by law.

This website does not send waitlist or contact-form content to AI models.

When the product launches, documents you choose to analyze will be processed by contracted AI providers under terms that prohibit training on your content. The product will show a clear notice before processing, explain the retention option you select, and let you delete the original and extracted facts. Those controls will be described in an updated policy before launch.

We share information only with service providers who help us operate the site, and only as needed:

• Cloudflare — hosting, content delivery, and security
• Email providers — to receive inquiries and send waitlist updates
• Professional advisers — where necessary to obtain legal or accounting advice
• Authorities — where required by law or to protect rights and safety

Processors are bound by contracts that limit their use of your information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

This website does not use advertising cookies, third-party analytics, or tracking pixels. We do not build advertising profiles.

Our hosting provider may use strictly necessary security mechanisms to protect the site. Fonts are served from our own domain, so visiting this site does not send a request to Google Fonts.

If we add analytics in the future, we will choose a privacy-respecting option, disclose it here, and provide a way to opt out where required.

• Waitlist: until launch, or until you ask to be removed — then deleted within 30 days.
• Contact messages: up to 24 months after the conversation ends, then deleted.
• Server logs: up to 30 days, unless needed to investigate a security incident.
• Backups: deleted on a rolling schedule of up to 90 days.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information
• Receive a portable copy
• Object to or restrict certain processing
• Withdraw consent at any time
• Lodge a complaint with your data protection authority

If you are in California, you have the right to know, delete, and correct personal information, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA.

To exercise a right, email [email protected]. We may ask for verification to protect your information. Exercising your rights is free.

Our infrastructure provider operates globally, so information may be processed in countries other than yours. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or the UK International Data Transfer Addendum.

This website is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has submitted information, contact us and we will delete it.

We use TLS for data in transit, encryption at rest provided by our infrastructure, and least-privilege access controls. OrbitaAI is not end-to-end encrypted: processing a document requires server-side access, and we do not misrepresent that.

If we become aware of a security incident affecting your personal information, we will notify affected users without undue delay and explain what happened. See our security page for more detail.

We may update this policy as the product evolves. Material changes will be announced on this page and, where appropriate, by email to waitlist members. The date at the top always reflects the current version.

Privacy questions and requests: [email protected]

Security reports: [email protected]

General inquiries: [email protected]

OrbitaAI is an independent project. A legal entity will be identified before paid services launch.