Privacy Policy
// Key points
- We collect financial, email, and usage data to power the Service
- We share with trusted processors only as needed to operate
- We do NOT sell your personal data — ever
- All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Bank connections are read-only; we never store your bank credentials
- You can export or delete your data at any time from Settings
- Nothing you store is deleted while you are subscribed; if your subscription ends, your data is kept 90 days for export, then deleted
- Questions? contact@orbitlo.com
1. Introduction
Orbit Intelligence LLC ("Orbit Intelligence," "we," "our," or "us"), a New York limited liability company and the operator of Orbitlo, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform — including the orbitlo.com website and waitlist, and the Orbitlo application at app.orbitlo.com. Please read it carefully. By using Orbitlo, you consent to the practices described here.
2. Information We Collect
2.1 Information you provide
| Data type | Examples | Purpose |
|---|---|---|
| Waitlist | Email address | To notify you when Orbitlo opens |
| Account information | Name, email address | Account creation and authentication via Google or Microsoft OAuth |
| Payment information | Credit card (via Stripe) | Subscription billing |
| Preferences | Notification settings, display preferences, workspace layout | Personalization |
2.2 Financial information (via Plaid)
When you connect your bank accounts we receive account names and balances, transaction history (merchant, amount, date, category), and masked account and routing numbers.
2.3 Brokerage and wallet information
If you connect a brokerage account (for example Coinbase or Alpaca) we receive portfolio holdings, balances, order history, and positions from accounts you own, and we transmit orders you author. If you track a blockchain wallet, we read publicly available balances from the address you supply — read-only, with no signing permission and no access to your keys.
2.4 Email & calendar data (via Google / Microsoft)
When you connect a Gmail or Outlook mailbox in Work, we read email content to find receipts, invoices, subscriptions and travel confirmations, and to show your mail inside Orbitlo, along with your calendar events. We keep the sender, subject, a short preview and the details found (such as company, amount and date) — not the full email; when you open a message it is loaded from your mailbox. The Google or Microsoft account you sign in with is used for sign-in only and is never scanned. Emails you write in Orbitlo are sent through your own mailbox, and only when you press Send. You control which permissions you grant and can disconnect at any time. Email Cleanup requires separate explicit opt-in before anything is deleted.
AI drafts in your writing style. So that AI drafts sound like you, Orbitlo reads your recent sent emails in each connected Work mailbox and keeps only a short description of your writing style and up to 20 short excerpts of your own words per mailbox. Numbers, links, email addresses and phone numbers are blanked out, and text quoted from other people is left out. This is used only for your own drafts — never for anyone else and never to train a model. In Work › Email you can see exactly what is kept, turn it off, or forget it; it is deleted when you disconnect that mailbox or delete your account.
Orbitlo’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
2.5 Documents you upload
Files you add to the Document Vault or process with our PDF tools, including extracted text and financial figures parsed from receipts, statements, and tax documents.
2.6 Codaa projects
Prompts you submit to Codaa, the code and applications it generates for you, and the conversation history needed to iterate on a project. Generated projects run in a preview environment inside Orbitlo; they are not published to a public address by us.
2.7 Voice input
If you use voice features, audio you record is processed to produce text, and text responses may be converted to speech. Audio is processed for that purpose and is not used to train our models.
2.8 Travel information
- Search queries (destinations, dates, preferences)
- Saved trips, flights, hotels, restaurants, activities
- Booking confirmations (if email access granted)
2.9 Automatically collected information
| Data type | Purpose |
|---|---|
| Device information | Browser type, OS, device identifier used for account security and fraud prevention |
| Usage data | Features used, pages visited, time spent |
| Log data | IP address, timestamps, error logs |
| Cookies | One sign-in cookie that keeps you logged in — no analytics or advertising cookies (section 8) |
3. How We Use Your Information
We use your information to provide and improve the Service: syncing accounts, detecting subscriptions, analyzing spending patterns, generating insights, enabling travel search, syncing email and calendar data, powering the trading terminal and Codaa, processing payments, communicating with you, and keeping accounts secure.
We do not use the content of your financial accounts, emails, or documents for advertising, and we do not sell your personal information.
4. How We Share Your Information
4.1 Third-party service providers
| Provider | Purpose | Data shared |
|---|---|---|
| Plaid | Bank connections | Financial credentials (handled by Plaid, never stored by us) |
| Stripe | Payment processing | Payment information |
| Sign-in, Gmail / Calendar integration | OAuth tokens | |
| Microsoft | Sign-in, Outlook / Calendar integration | OAuth tokens |
| Coinbase, Alpaca | Brokerage connections you authorize | Orders you author, account tokens |
| GPU infrastructure providers | Hosting the AI models we operate | Query content processed on infrastructure we control |
| Speech providers | Speech-to-text and text-to-speech | Audio and text of voice interactions |
| Amadeus | Flight and hotel search | Search queries (destinations, dates, passengers) |
| Formspree | The waitlist form on orbitlo.com | The email address you enter |
| Infrastructure & monitoring | Hosting, security, error reporting | Operational and error data |
4.2 Other disclosures
We may disclose information when required by law, to protect our rights or user safety, or in connection with a merger or acquisition — in which case we will notify you before your data becomes subject to a different policy.
4A. How AI Processing Works
Orbitlo’s AI features run on model infrastructure we operate. Your queries are not sent to third-party AI assistants or model APIs. Even on our own infrastructure, identifiers are tokenized and financial identifiers are masked before a query reaches a model — raw account numbers, balances tied to your identity, and personal identifiers are kept out of the model layer entirely.
Your writing-style description and excerpts (section 2.4) are given to the model only as examples when you ask for a draft. They are not used to train it.
5. Data Retention
| Data type | Retention period |
|---|---|
| Everything you store in Orbitlo | Financial data, conversations, Codaa projects, email-derived data, your writing style and insights are kept for as long as you are subscribed. Nothing is deleted on a schedule while you subscribe. |
| If your subscription ends | Bank connections are closed immediately. Your data is kept for 90 days so you can export it or subscribe again, then permanently deleted. We notify you when the subscription ends and again 14 days before deletion. You can still sign in to export your data or delete your account. |
| If you delete your account | Deleted immediately; removed from backups within 30 days |
| Emails | The full email is not kept — only the sender, subject, a short preview and the details found (section 2.4) |
| Generated exports | Never stored — built on request and sent straight to your browser |
| Analytics | None collected — orbitlo.com and the app use no analytics or advertising trackers |
| Waitlist email | Kept until 30 days after launch so we can send your invitation, then deleted — sooner if you ask us |
6. Data Security
- Encryption: all data encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access controls: role-based access, principle of least privilege
- Infrastructure: secure cloud hosting on SOC 2-compliant infrastructure
- Authentication: secure OAuth-based login, optional 2FA
- Isolation: Codaa-generated applications run in sandboxed environments separated from your account data
- Monitoring: continuous security monitoring and alerting
No system is perfectly secure. We will notify affected users of any breach as required by applicable law.
7. Your Privacy Rights
You can view, export, correct, and delete your data at any time from Settings, and disconnect any bank, brokerage, or email connection whenever you choose. California residents have additional CCPA rights, including the right to know and the right to delete. EU/EEA and UK residents have GDPR rights including access, rectification, erasure, portability, restriction, objection, and the right to lodge a complaint with a supervisory authority. To exercise any right, contact contact@orbitlo.com.
8. Cookies and Tracking
| Type | Purpose | Duration |
|---|---|---|
| Sign-in cookie (essential) | Tells the app you are signed in. It holds no personal data. | 30 days, or until you sign out |
| Stored on your device | Your theme, layout, recent searches and unsent drafts, kept in your browser’s own storage — not sent to us as cookies | Until you clear your browser storage |
We use no analytics, advertising or tracking cookies, and no third-party trackers, on orbitlo.com or in the app.
9. Children's Privacy
Orbitlo is not intended for users under 18 years old. We do not knowingly collect data from children.
10. International Data Transfers
Your data may be transferred to and processed in the United States and other countries. We ensure appropriate safeguards are in place for international transfers.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.