Privacy policy

Who is responsible

Orbi is the data controller for the processing described here. For questions and requests, write to platform@orbiwork.space.

What we process

Account data: your name, email address and sign-in method. If you sign in with Google or GitHub, we take only the basic profile information needed to verify who you are.

Workspace content: the tasks, comments, collection records, uploaded files and agent outputs you create.

Usage records: which agent called which tool and when, how long a run took and what it consumed. These are kept both to give you transparency and for billing.

Data from accounts you connect: covered under its own heading below.

Site visit records: when you browse the pages of this site we record which page you viewed, your IP address, browser information, where you came from and how long you stayed. The record is tied to a random identifier given to your browser, not to your account, and is used to understand which content is useful. It is not used for advertising and is not shared with third parties.

What you write in the contact form: your name, email address, subject and message. These are used only to reply to you and land in the platform team's inbox; they are not added to a marketing list. While the form is being protected against automated submissions your IP address and browser information are also processed briefly — that step runs on our own servers, no third-party verification service is used and your address is not passed on to anyone.

Booking and demo requests: your name, email address and, optionally, your phone number, company, role and team size; plus the times you suggest, your time zone and any note you write. Unlike the contact form, this is stored as a RECORD, because the state of a booking (pending, confirmed, a new time proposed) has to be tracked. If you never confirm your email address the request is deleted after 30 days. You can cancel your booking at any time from the link in your email, and you can ask for your records to be deleted at platform@orbiwork.space.

Accounts you connect

You can connect services such as Gmail, Outlook, Slack, Jira, Confluence, HubSpot, Zoom and Google Calendar with your own account. The access you grant is used only to run the tools that service provides to you.

Data from these services is not copied and kept. When an agent reads an email or lists a meeting, that data is processed only for the duration of that run; what remains afterwards is the run trail describing what was done.

Your access tokens are stored encrypted, are never shown on any screen again and are never sent to a language model. You can remove a connection at any time, which deletes the tokens.

Connections you make personally resolve only to you. If someone else in the workspace triggers an agent, your personal connection is not used.

Orbi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Google is not used for advertising, is not sold to third parties and is not used to train artificial intelligence models.

AI providers

When an agent runs, the context of the task is sent to a language model provider. If you have set your own API key, the call goes straight from your provider account and the content is not retained on our side.

Your keys are stored encrypted and are never shown on any screen once saved.

Sharing

Your data is not sold. It is shared only with the infrastructure providers needed to run the service, and only as far as needed: hosting, email delivery, payment processing and the AI provider you choose.

Payment details never reach us; card data is processed directly by the payment provider.

Where a legal obligation arises, disclosure is limited to what that obligation covers.

How long we keep it

Workspace content is kept until you delete it. A deleted file waits 30 days in the trash and can be restored during that time.

Admins delete a workspace from the interface; a deleted workspace stays restorable for 30 days, after which its content (tasks, collections, files, agent definitions and audit records) is permanently erased. Payment records are the exception: the record of the payments made and of which plan applied when is kept for the statutory retention period, both by us and by the payment provider. These records carry the amount, the date and the plan.

You delete your account from account settings: your name, e-mail, avatar, password and linked accounts are removed; your comments and task history remain without identity. For requests that need a manual step, write to platform@orbiwork.space.

Audit records are not deleted for the life of the workspace: which agent changed what and when stays on record.

Site visit records are kept for at most 13 months and are then deleted automatically.

Security

Access tokens, API keys and similar secrets are stored encrypted. Connections are encrypted in transit.

Workspaces are isolated from one another; only members of a workspace can reach its data, according to the role they hold.

Your rights

You have the right to access, correct and delete your data, and to object to processing. Deletion and portability are exercised directly in the interface; for other requests write to platform@orbiwork.space.

You can download a copy of your data from the workspace settings as a single archive (tasks, collections, files, agent definitions); collections can also be exported as CSV. The archive can later be restored as a new workspace.

Cookies

In the application, only the cookies needed to keep you signed in are used.

This site also sets three first-party measurement cookies: a random identifier for your browser (one year), an identifier for your visit (thirty minutes) and one marking the page you are currently viewing (thirty minutes). They exist only to count how many times a page was viewed; they are not linked to your name or email and are never sent to another site.

No advertising or profiling trackers, third-party analytics tools or ad networks are used.

Changes

When this policy changes, the date at the top of the page is updated. Significant changes are also announced by email.