Privacy Policy

Last updated: March 9, 2025

What you put into Orbits is private. This privacy policy explains how we collect, use, and protect your personal information when you use the platform.

Data Isolation and Network Privacy

We use Memgraph, a graph database, to store your network connections. Your data is protected through a multi-layered isolation approach:

  • Your network data is only accessible through your authenticated user account
  • Each user has their own private network space that cannot be accessed by others
  • All database queries are automatically scoped to your personal network
  • Network connections and relationships are only visible to you
  • Technical safeguards prevent unauthorized access to your network data
  • Database constraints ensure your data remains separate from other users

This means that your network connections, groups, and relationships are completely private and can only be accessed by you when logged into your account.

Information Storage

We use Supabase to store and process your data securely. Our Supabase implementation includes multiple security layers:

  • Row Level Security (RLS) policies ensure you can only access your own data
  • Separate database schemas for development and production environments
  • Encrypted data storage and secure API endpoints
  • Automatic user data isolation through unique identifiers
  • Database constraints preventing unauthorized data access or modifications

All user profile information is protected by these security measures, ensuring that your personal information remains private and secure.

Additional Privacy & Security Features

We've implemented several additional measures to ensure your data remains private and secure:

  • End-to-end request authentication using secure tokens
  • Environment variables for sensitive configuration data
  • Secure password and credential management
  • Protection against unauthorized API access
  • Automatic session management and timeout
  • Development/production environment separation

Authentication

We use Clerk for user authentication. Their privacy practices are governed by their own privacy policy, which you can review on their website.

Analytics

We use PostHog and Umami for analytics to improve our service. This helps us understand how users interact with our platform while respecting privacy preferences.

Information We Collect

We collect information you provide directly to us when you:

  • Create and update your account profile
  • Subscribe to our services

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our platform
  • Process your transactions and subscriptions
  • Send you technical notices and support messages
  • Communicate with you about products, services, and updates
  • Monitor and analyze trends and usage

Data Sharing

We do not sell your personal information.

User Profile Sharing

Orbits allows users to share their public profiles with others. Here's what you should know about profile sharing:

  • You can choose to create a public profile visible to other users
  • You control which information is shared and can modify these settings at any time
  • Shared profile information may include your name, bio, and other details you choose to make public
  • Your own network connections and relationships remain private
  • Other Orbits users can import a copy of your public profile information into their own network
  • We monitor public profiles for compliance with our terms of service

Data Ownership

Your data belongs to you, not to Orbits. We act as a processor and secure storage provider for your information, but you retain full ownership of your data. This means:

  • You maintain complete control over your personal information and network data
  • You can export, modify, or delete your data
  • We only process and store your data to provide you with our service
  • We do not claim any ownership rights over your information
  • We will never sell or monetize your personal data

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this privacy policy or our practices, please contact us at maya@orbits.so.

Adapted from the Basecamp open-source policies / CC BY 4.0