Who runs Orbit

Orbit is operated by JSTN Consulting Pty Ltd (ABN 81 690 388 768), trading as Orbit AI, registered in Queensland, Australia. For privacy matters, please use the contact form.

What we collect

Only what's needed to run the site and keep subscribers informed. In plain terms:

Email + first name when you opt in to product updates through the email-capture modal or any sign-up form on the site.
Message content when you submit the contact form (your email, your name if given, and what you wrote).
Anonymous usage analytics via Google Analytics 4: page views, referring site, rough geography from IP, device type, and clicks on key calls-to-action. That includes the fact that you used the chat box and how it went, how long your question was, how many results came back, which one was on top, but never the words you typed. Question text is not sent to Google. No personal profile is built.
Aggregated telemetry from the Orbit MCP extension: install counts, tool-invocation counts, and friction signals (which tool failed repeatedly, or that a request matched no skill), sent to Orbit's servers. Friction signals may carry a short description that is redacted on your machine before sending: emails, URLs, file paths, keys, and number sequences are stripped and never leave your computer. No prompts, no customer data, and no Braze workspace contents are ever sent to Orbit. You can turn it off entirely by setting ORBIT_TELEMETRY=0. Separately, if you explicitly ask Orbit to submit a product idea, the exact text you approved (also redacted) is sent: that happens only on your instruction, is shown to you before it goes, and can be retracted.
What the Orbit MCP does not send to us, and a boundary worth being precise about. The Orbit MCP runs inside Claude. When you use it, your prompts and the Braze and Stripo data it fetches are processed by Anthropic, under Anthropic's terms, exactly as any other Claude conversation is. That is how the tool works, not a data-sharing arrangement with us: the MCP does not route your prompts or your workspace data to Orbit. Where your Claude data lives, and who can see it, is governed by your agreement with Anthropic.
Chat questions typed into the assistant on this site. We store the question text so we can see what people are actually asking and fix the gaps, not who asked it. It is redacted before it is written: email addresses, URLs, file paths, API keys and long number sequences are stripped out, and no account, cookie or session identifier is stored alongside it. Please still don't paste client data into a box on a public website.
Contribution records if you gave something through the donate page we ran until 22 September 2026. We no longer take contributions. Stripe handled the payment and the card details, which never reached us. We keep the email address Stripe collected, the amount, and Stripe's payment reference, for as long as the tax obligation below runs. Giving did not subscribe you to anything and recorded no marketing consent.
Subscription records if you buy the Orbit MCP extension. Stripe takes the payment and holds the card details, which never reach us. We keep your email address, which plan you are on, and a one-way hash of your activation key: enough to check the key is valid and to bill, refund, or cancel you. The extension runs on your own machine on your own platform keys, so nothing from your Braze account or anyone else's marketing data comes to us with it.
Your IP address is used for two things, and kept for neither in the clear. It resolves an approximate country, which decides whether the consent checkbox on the email-capture modal is opt-in (EU/UK/Canada) or opt-out (rest of world) and is stored as a country name against your consent record. And it is used to throttle repeated failed sign-in attempts, where it is stored hashed, for fifteen minutes, purely to stop password guessing.

We do not buy or rent mailing lists. We do not collect special-category data (health, ethnicity, political opinions, etc.). We do not knowingly collect data from under-16s.

Why we collect it (lawful basis)

Consent: for marketing emails. You can withdraw at any time via the unsubscribe link in every email, or by replying "unsubscribe" to any message from us.
Legitimate interest: for contact-form replies, anonymous analytics, and fraud prevention.
Legal obligation: for tax and accounting records where money has changed hands. That means subscription payments for the Orbit MCP extension, and the voluntary contributions we took until 22 September 2026. Australian law requires us to keep a record of both.

Who we share it with

Data is stored with service providers who help us run the site. The short list:

Railway: web hosting (US/EU regions).
Neon / Postgres: database for subscribers, form submissions, and visit counts.
AWS S3: static asset storage for the download artefact and logos.
Google Analytics 4: anonymous usage analytics. IP anonymization on, ads-personalization off.
Web3Forms: contact-form relay so messages reach the founder inbox.
Stripe: payment processing for subscriptions, and the only party that ever sees your card details. Stripe collects your email on its own checkout page and passes it back to us so the payment is attributable and refundable.

We do not sell data to third parties. We do not share data with advertising networks. We do not participate in data-broker exchanges.

How long we keep it

Subscribers: until you unsubscribe. After unsubscribe, your address is kept on a suppression list indefinitely so we never email you again by accident.
Contact-form submissions: up to 24 months, then purged.
Chat questions: 90 days, then deleted. The sweep runs on every deploy and alongside normal chat traffic: automatic, never a manual task. There is no separate scheduler, so in a long quiet spell a question can outlive 90 days until the next sweep runs.
Payment records (subscriptions and contributions): at least five years. Australian tax law requires financial records to be kept that long, so this is one thing we cannot delete on request while the obligation runs.
Analytics: 14 months (the GA4 default, non-extensible).

Your rights

Regardless of where you live, you can ask us to:

Tell you what we have on file.
Correct anything that's wrong.
Delete your data ("right to be forgotten").
Export your data in a portable format.
Withdraw consent for marketing emails at any time.
Object to or restrict processing.

One honest limit on deletion: where a payment has been made, whether a subscription or a contribution, the financial record behind it has to be kept for the period Australian tax law sets. We will delete everything else, and delete that too once the obligation ends.

Use the contact form with the request. We respond within 30 days.

If you're in the EU/UK and think we've mishandled your data, you can lodge a complaint with your local supervisory authority. If you're in Australia, you can lodge a complaint with the Office of the Australian Information Commissioner.

Cookies and similar tech

The site uses a small set of cookies:

Strictly necessary: auth cookies on /admin, session storage for modal state, and CSRF tokens on forms.
Analytics: GA4 cookies (_ga, _ga_*) with IP anonymization.

No advertising cookies. No cross-site trackers. No fingerprinting. You can block all cookies in your browser without breaking the public site; /admin will stop working if you block its auth cookie, which is expected.

International transfers

Orbit is operated from Australia. Hosting, analytics and payment providers are located in the EU and US. Where data leaves your jurisdiction, it travels under standard contractual clauses or equivalent safeguards required by the provider in question.

Changes to this policy

If the substance changes, we'll update the "last updated" date and, for material changes, email any active subscribers before the change takes effect.

Privacy policy.