OrbitDesk (“we”, “our”, “us”) operates an AI-first workspace operating system for business teams. This Privacy Policy explains what data we collect, how we use it, and your rights as a user. By creating an account you agree to the practices described here.
OrbitDesk is currently in private alpha. Features, data practices, and this policy may evolve. We will notify registered users of material changes by email.
1. Data We Collect
Account Information
When you register, we collect your email address, full name, and any profile information you choose to provide (job title, avatar).
Workspace Data
All content you create inside OrbitDesk — companies, contacts, deals, notes, tasks, and activity records — is stored in your workspace and associated with your account.
Usage Activity
We record workspace activity events (e.g. “deal created”, “task completed”) to power your activity feed and workspace analytics.
Technical Data
Standard server logs including IP addresses, browser type, and request timestamps for security and debugging purposes.
2. How We Use Your Data
- →To provide and operate the OrbitDesk platform
- →To authenticate your identity and secure your workspace
- →To power AI features: note content may be sent to OpenAI’s API to generate summaries and insights (see Section 4)
- →To send transactional emails (workspace invites, verification) via Resend
- →To improve the product during the alpha period based on usage patterns
We do not sell your data. We do not use your data for advertising.
3. Data Storage & Security
Your data is stored in Supabase, a managed PostgreSQL platform. Data may be stored in the US or EU depending on your region. We enforce row-level security (RLS) so that workspace data is only accessible to authenticated members of that workspace.
Authentication is handled by Supabase Auth using email and password. Passwords are never stored in plain text. All connections are encrypted via TLS.
Alpha note: During the private alpha period, workspace data may be reset, migrated, or deleted without advance notice as we iterate on the product. We recommend not storing business-critical information in OrbitDesk during this phase.
4. AI & Third-Party Services
OpenAI
When you use AI features (note summarization, AI assistant), the relevant content is sent to OpenAI’s API for processing. OpenAI’s data usage policies apply. We do not send your account credentials or payment information to OpenAI.
Supabase
Database, authentication, and real-time features are provided by Supabase, Inc.
Resend
Transactional emails (workspace invites, account verification) are sent via Resend. Email addresses are shared with Resend only for delivery purposes.
Upstash Redis
User IDs are stored temporarily in Upstash Redis for rate limiting purposes. No personal data beyond user ID is stored.
5. Your Rights
Depending on your jurisdiction, you may have rights including:
- →Access to the personal data we hold about you
- →Correction of inaccurate data
- →Deletion of your account and associated data
- →Export of your workspace data
To exercise any of these rights, email support@orbitdesk.online. We will respond within 30 days.
6. Data Retention
We retain your account and workspace data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it by law.
7. Cookies
OrbitDesk uses session cookies provided by Supabase Auth to keep you logged in. These are strictly necessary for the service to function and do not track you across third-party websites. We do not use advertising cookies or third-party tracking scripts.
8. Contact
For privacy questions, data requests, or concerns, contact us at support@orbitdesk.online.
© 2026 OrbitDesk. All rights reserved.