Privacy Policy

Orbis (tryorbis.app) is an AI workspace run from the United Kingdom by the operator of Orbis (“Orbis”, “we”, “us”). We decide how and why your personal data is used, which makes us the “controller” under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy covers personal data we process when you visit tryorbis.app, create an account and use Orbis. It doesn't cover the services of AI providers or apps you connect, which have their own policies.

Contact us about your data at support@tryorbis.app. We haven't appointed a Data Protection Officer; that address reaches the person responsible for data protection at Orbis.

• We collect what's needed to run Orbis: your account, what you put into it, and records of how much you use.
• To answer you, your messages are sent to the AI provider of the model that replies — today Anthropic (Claude) and OpenAI (GPT). Every reply names its model.
• We don't use your content to train AI models, we don't sell your data, and we don't show ads.
• Only strictly necessary cookies are used. There are no analytics or advertising cookies.
• You can delete conversations and projects at any time, disconnect apps, and ask us for a copy of your data or to delete your account.

Data you give us

• Account details: your email address, the name you give (optional) and your password, which our sign-in provider stores only as a secure hash.
• Your content: your messages and the AI's replies, conversation titles and cited sources. For files you attach, we keep only the file names: the contents are sent to the AI model to answer you but aren't stored by Orbis. Also agents, missions, Council and Arena sessions, projects and notes you create; code projects and their files; and for each coding agent run, your request, an activity log of what it read, ran and changed (including command output), and each changed file's content before and after the run.
• Security Team data: websites you register, scan results and findings, including short excerpts of evidence.
• Communications: what you send us when you email us, such as support questions or requests about your data.
• Acceptances: when you accepted our Terms of Service and this policy, and which version.

Data created when you use Orbis

• Usage records: for each AI request, the model, number of tokens, estimated cost, time taken, what it was for, and the first part of the prompt and reply (up to 4,000 and 8,000 characters). For code you run from a chat reply, only the language and exit code. For workspace computers, the minutes used.
• Technical data: your IP address, browser and device details, processed by our hosting and sign-in providers in their logs to deliver the service and keep it secure. If you use Orbis without an account, your IP address is used briefly in memory to apply rate limits; it isn't stored in our database.
• On your device: without an account, your conversations are kept only in your browser's local storage. Preferences (theme, sidebar, last model, saved prompts and the thumbs-up/down you give replies) are kept in your browser only.

Data from others

• Sign-in providers: if you sign in with Google or GitHub, we receive your name, email address and account ID from them.
• Connected apps: when you connect an app, we store an account label (such as the connected account's email address), the permissions you granted, encrypted access tokens and when the connection was made, checked and last used. When you confirm an action in an app, we log the app, the action, whether it worked and a short summary, but not the message or document content. What Orbis reads from your apps is used to answer you and is saved only as part of that answer and its cited sources.
• Payments: when paid plans are on sale, Stripe tells us your customer ID, plan, subscription status and billing period, never your card number.

• To provide Orbis: your account, storing your work, sending your requests to AI models, running code and connecting apps you choose.
• To apply plan limits, take payment and keep billing records.
• To keep Orbis secure: rate limits, usage caps, preventing fraud and abuse, and investigating misuse.
• To support you and send service messages, such as confirming your email or resetting your password. We don't send marketing emails.
• To understand overall usage — for example, which models are used and what they cost — from aggregated usage records.
• To comply with the law and respond to lawful requests.

We don't use your conversations, files or code to train AI models, and we don't use them to build advertising profiles. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

• Contract: to provide Orbis and the features you use, and to manage your account and plan.
• Legitimate interests: to keep Orbis secure, prevent abuse, enforce limits, understand overall usage and improve the service. You can object to this processing (see Your rights).
• Legal obligation: to keep billing and tax records and respond to lawful requests.
• Consent: where we ask for it. You can withdraw consent at any time.

We use these service providers to run Orbis. They process data on our behalf, under their data processing terms:

• Supabase — database and sign-in. Data is stored in the United States (AWS US East).
• Vercel — website hosting, server functions, and the isolated computers that run code. United States.
• Anthropic (Claude models) and OpenAI (GPT models) — receive your message, the earlier messages of that conversation, the contents of files you attach, and, for coding agent runs, the parts of your project the agent reads. Under their API terms, data sent through their APIs isn't used to train their models by default; they may keep it for a limited period to monitor abuse.
• Stripe — payments, once paid plans are on sale.

Only Anthropic and OpenAI models are enabled on tryorbis.app today. Orbis can also use Google (Gemini), xAI (Grok), DeepSeek and a web search provider (Tavily or Brave); we'll add any of them to this list before they receive your data.

Apps you connect (such as Google Drive, Gmail, Slack, Notion, GitHub or Wikipedia) receive the searches Orbis makes for you and the actions you confirm. Their own privacy policies apply.

Package registries (npm and PyPI) see the download requests your project's computer makes when it installs packages.

Authorities and others, when required: we may disclose data if the law requires it, to protect people's safety or rights, or to investigate fraud or security issues.

Business transfers: if Orbis is sold, merged or reorganised, data may pass to the new owner, who must keep protecting it as this policy describes.

We don't sell personal data or share it with advertisers.

Our main providers store and process data in the United States. Where data leaves the UK, we rely on the safeguards the law provides: the UK–US data bridge for certified companies, or the UK International Data Transfer Addendum or Agreement included in our providers' data processing terms.

• Your account and your content — while your account exists. When you delete a conversation, project or agent, it's removed from our database straight away; copies may remain in our providers' backups for a limited time before they're overwritten.
• Usage records — while your account exists, because they underpin your limits and billing history.
• Billing records — as long as tax law requires (usually six years in the UK).
• Connected-app tokens — until you disconnect the app or delete your account.
• Records of your acceptances — while your account exists.
• When you delete your account — we delete it and the content linked to it within 30 days of your request, except records we must keep by law or to resolve a dispute.

• Delete or archive any conversation from the sidebar; delete agents, missions and code projects at any time.
• Revert any change the coding agent made, or a single file, from the Changes panel.
• Turn each connected app to Auto, “only when I mention it” or Off, or disconnect it entirely.
• Use Orbis without an account: your conversations then stay in your browser only.
• Clear the preferences Orbis keeps in your browser through your browser's settings.
• There's nothing to opt out of for AI training or marketing, because we do neither with your data.

Under UK data protection law you have the right to:

• get a copy of your personal data (access);
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use it, or object to processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw consent you've given, at any time.

To use these rights, email support@tryorbis.app from the address on your account. We may ask you to confirm your identity. We'll reply within one month. Deleting your account isn't self-service yet, so this is also how you ask for that.

If an AI reply in your account contains inaccurate information about you or someone else, tell us. We can't change how the AI models work, but we can delete the reply.

If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113.

Orbis uses only cookies that are strictly necessary for it to work, so it doesn't ask for cookie consent:

• Sign-in cookies (from Supabase, names starting with “sb-”) keep you signed in.
• orbis_terms remembers that you've accepted the current Terms of Service and Privacy Policy, so you aren't asked again on every page.
• Temporary cookies protect the sign-in to an app you're connecting (orbis_connect, 10 minutes) and carry your acceptance through signing up with Google or GitHub (orbis_terms_pending, 30 minutes).

Your browser's local storage holds your preferences and, without an account, your conversations. There are no analytics or advertising cookies. If we ever add analytics, we'll update this policy first and ask for your consent where the law requires it.

Orbis isn't for children under 13. If you're between 13 and 17, you need a parent's or guardian's permission to use it. If we learn that someone under 13 has an account, we'll delete it. Parents and guardians can contact us at support@tryorbis.app.

Data is sent over HTTPS. Database row-level security means signed-in users can read only their own data. Connected-app tokens are encrypted with a key only our server holds. Code runs on isolated, short-lived computers that hold none of Orbis's own keys. No system is perfectly secure; if a breach affects your personal data, we'll tell you and the ICO as the law requires. More detail is on Security & data.

Orbis shows links to other websites, for example in cited sources and AI replies. We're not responsible for those websites or how they handle your data; read their privacy policies.

We'll post any new version here with a new date. If a change significantly affects how we use your data, we'll tell you in Orbis or by email before it takes effect, and ask you to accept the new version before you continue using Orbis.

Email support@tryorbis.app. Orbis is based in the United Kingdom.