OrbitOS

Privacy Policy

Last updated 8 October 2026

This policy explains what OrbitOS collects, why, and the choices you have. It is a template written for this product; have it reviewed by counsel for your jurisdiction (including Kenya's Data Protection Act, 2019 and the GDPR where applicable) before relying on it.

What we collect

  • Account data: name, work email, time zone, working hours, profile photo, and your WhatsApp number if you link it.
  • Workspace content you add: tasks, finance entries, meetings, messages, polls, kudos, compliance records and uploaded evidence.
  • Security data: sign-in events, IP address and browser user agent, recorded in your workspace's audit log.
  • Payment data: plan, amount and status. Card and M-Pesa details are handled by IntaSend; we never see full card numbers or your M-Pesa PIN.

How we use it

  • To run the service and compute the metrics you see.
  • To send the emails you enable (invites, reminders, digests, receipts).
  • To keep accounts secure and investigate abuse.

Who can see it

Workspace data is isolated per organization by database row-level security and is visible only to members according to their role. Individual poll votes marked anonymous are never shown to anyone, including admins.

Processors

  • Supabase (database, authentication, storage)
  • Vercel (hosting)
  • IntaSend (payments)
  • Resend (email)
  • Sentry (error reports, with personal details removed)
  • Meta — WhatsApp Cloud API (only for people who link WhatsApp)
  • Anthropic — Claude (only if the workspace owner turns on the AI chief of staff)
  • Slack and GitHub (only if the workspace connects them)

Your rights

You can access, correct, export or delete your data. Workspace owners can schedule deletion from Settings, and on Enterprise download a full archive. For requests, contact your workspace owner.

Retention

Workspace data is kept while the workspace is active. Offboarded workspaces are deleted 30 days after offboarding is confirmed. Audit logs are kept for the period the owner sets in Settings (7 years unless changed).