How Orbit keeps your work safe
Plain facts about where your data lives, who can read it, how payments and AI are handled, and what you control.
Your data stays with your account
Orbit runs on secure cloud infrastructure that hosts its database, sign-in, file storage and server functions. Here is how your data is kept to your account.
Row-level security on every table
Row-level security is switched on for every table in Orbit's database, so the database itself only returns the rows your account is allowed to see.
Encrypted in transit and at rest
The apps and the web dashboard talk to Orbit's servers over HTTPS (TLS). Our infrastructure provider encrypts your data at rest (AES-256) and in transit (TLS).
Private file storage
Attachments, profile photos, expense receipts and drawn contract signatures sit in private storage that only your account can open. Images you add to clients and projects are the exception: they load from a public link.
Sign in your way
Use an email and password, or continue with Google or Apple. To change your password, you confirm your current one first.
Breached-password check
New passwords are checked against a database of breached passwords using a privacy-preserving check. Only the first five characters of a one-way hash leave your device, and the match is made on your device.
No ad tracking
The Orbit app has no third-party advertising SDKs and doesn't track you across other companies' apps or websites, and Orbit doesn't sell your data. Our website only uses analytics or advertising cookies if you accept them.
Orbi works for you, not on your data
Orbi, Orbit's assistant, looks things up in your workspace only to answer you and propose changes, and it never changes anything you haven't confirmed.
Providers that don't train on you
Orbi requests go to a third-party AI model provider that doesn't collect or train on your data. Tag and subtask suggestions use an AI provider whose terms exclude training on that content.
Chat history stays on your device
Your Orbi conversations are saved only on the device or browser where you had them, never on Orbit's servers. Signing out clears them.
Nothing changes without your OK
Orbi proposes changes and applies them only after you review and confirm. It can't delete your data or send messages, emails, invoices or quotes for you.
Orbit never sees your card
In the iOS app: Apple
Subscriptions bought in the app go through Apple's in-app purchase. Orbit receives your subscription status from the App Store, not your payment details.
On the web: LemonSqueezy
Web checkout runs on LemonSqueezy's own hosted pages, so card details are never entered anywhere in Orbit. LemonSqueezy is the Merchant of Record.
Only what billing needs
Orbit keeps a trimmed copy of each subscription update for support, with the name, email and card details stripped out before it's stored.
Stay in control
Delete your account any time
Settings › Account › Delete Account permanently removes your account, everything in it and your stored files. Backup copies are purged, typically within 30 days.
- Pro plan
Signature evidence on contracts
When a client signs, Orbit records their name and email, the time, their IP address and a SHA-256 fingerprint of the contract they saw, as an audit trail.
Your privacy rights
Ask us to access, correct, delete or export your personal information. Orbit follows the Philippine Data Privacy Act and honors GDPR- and CCPA-style rights where they apply.
Found a security issue?
Please tell us before anyone else. Email support@orbithq.net with the details and steps to reproduce it, and we'll follow up with you.
The full details
Frequently asked questions
Row-level security on every table means the database returns only the rows your account is allowed to read. Things you choose to share, like a client portal, quote, invoice or contract link, can be opened by anyone who has that link, so share links carefully.
Yes. Traffic between the Orbit apps, the web dashboard and Orbit's servers uses HTTPS (TLS), and our infrastructure provider encrypts your data at rest (AES-256) and in transit (TLS).
No. Orbi requests go only to third-party AI model providers that don't collect or train on your data, and tag and subtask suggestions use an AI provider whose terms exclude training on that content. Your Orbi chat history is stored only on your device and cleared when you sign out.
Your account and its data are permanently removed, including tasks, projects, clients, documents, contract signature records and the files you uploaded. Backup copies are purged within a reasonable period, typically 30 days. Invoices and legal records may be kept where the law requires.
Orbit doesn't claim any certifications. This page lists what Orbit actually does to protect your data, and the Privacy Policy covers each kind of service provider Orbit uses and what each one handles.
Orbit's web dashboard and its iPhone app, side by side.
