Orbitr LLC (“Orbitr,” “we,” “us,” or “our”) provides AI-powered search visibility, SEO, and publishing workflow software. This Privacy Policy applies to getorbitr.com, the Orbitr application, support and sales interactions, and related services (collectively, the “Services”).

This policy does not replace a customer's own privacy obligations. When an organization uses Orbitr to process data about its customers, visitors, employees, or contacts, that organization generally controls the data and Orbitr processes it under the customer's instructions and applicable agreement. For account, billing, website, security, and direct marketing data, Orbitr generally acts as the business or controller.

1. Data We Collect

Account and organization data

Name, email address, password hash, authentication events, role, and account settings.
Company, team, organization, site, and subscription information.
Messages, files, and other information you send to sales or support.

Customer content and service data

Website URLs, audits, search data, task instructions, prompts, drafts, approvals, results, and verification evidence.
Content, assets, and business context you submit or authorize Orbitr to retrieve.
Task history, execution logs, rollback records, and other records needed to operate and audit authorized workflows.

Connected-platform data

When you enable an integration, we receive the identifiers, permissions, tokens, settings, and data needed for the feature you selected. Depending on your plan and configuration, this can include Google Search Console, Google Analytics, Google Business Profile, GitHub, content management systems and publishing platforms, Stripe revenue data, and other integrations displayed in the Services. We do not access a connected account until you authorize it.

Payment and commercial data

Stripe processes payment-card details for Orbitr subscriptions. We receive transaction identifiers, subscription status, plan, billing dates, and limited payment information such as card brand and last four digits. If you participate in a referral or affiliate program, we may also process attribution, commission, tax, and payout information through the applicable program provider.

Device, log, and usage data

IP address, browser and device type, operating system, timestamps, requested URLs, and security logs.
Feature interactions, page views, referring pages, task events, and diagnostic information.
With analytics consent, Google Analytics and PostHog may collect page views, interaction events, online identifiers, and, where enabled, session replay data.
With marketing consent, Google advertising services and Meta Pixel may collect page views, online identifiers, and campaign or conversion events.
Error-monitoring systems may receive technical context needed to diagnose failures and protect the Services.

Data from forms and business sources

We collect information submitted through demo, waitlist, audit, and contact forms. We may also receive ordinary business contact information from referrals, public business sources, and service providers that help us prevent fraud or maintain accurate commercial records.

2. Data You Should Not Submit

Do not submit protected health information, government identification numbers, full payment-card data, highly sensitive employment or education records, private keys, passwords for third-party services unless an Orbitr connection flow expressly requests them, or other sensitive personal data that is unnecessary for the selected feature. You are responsible for having the rights and notices needed for personal data you provide to Orbitr.

3. How and Why We Use Data

Provide the Services: authenticate users, maintain accounts, run requested analyses, generate outputs, execute authorized workflows, verify results, bill customers, and provide support.
Secure and maintain the Services: prevent abuse, investigate incidents, debug failures, preserve audit records, and enforce permissions.
Improve the product: evaluate reliability, usability, and feature performance using service data and feedback.
Communicate: send service notices, respond to requests, and send marketing where permitted. You can opt out of marketing email at any time.
Meet legal obligations: maintain tax and transaction records, respond to lawful requests, and establish or defend legal claims.

Legal bases for EEA, UK, and Swiss users

Where applicable, we rely on performance of a contract to provide the Services, legitimate interests in securing and improving the Services and communicating with customers, consent for optional analytics or marketing where required, and compliance with legal obligations. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

4. AI Processing and Automated Workflows

Orbitr uses third-party model providers, which may include OpenAI, Anthropic, and Google, to process prompts and relevant context for the feature you request. The provider used can depend on the feature, availability, and configuration. We send data reasonably needed to produce the requested output and apply contractual and technical controls appropriate to the service.

Orbitr does not use customer content to train its own general-purpose models.
We do not permit model providers to use customer content to train their general-purpose models where our provider agreement or selected service offers that control.
AI output may be inaccurate and should be evaluated for the intended use.
When you approve a task or enable an authorized workflow, Orbitr may use AI-assisted decisions to perform and verify actions within that scope.

Orbitr does not use AI to make decisions that produce legal or similarly significant effects about an individual, such as employment, credit, housing, insurance, or health eligibility.

5. Cookies and Similar Technologies

Orbitr uses the following categories:

Essential: authentication, security, consent storage, and core application operation. These cannot be disabled through the consent tool.
Analytics: optional Google Analytics, PostHog analytics, feature measurement, and session replay. Analytics storage and page-view measurement remain disabled unless you grant Analytics consent.
Functional: optional preferences and personalization.
Marketing: optional Google advertising services and Meta Pixel for campaign measurement, conversion reporting, audience matching, and personalized or targeted advertising. Advertising storage and signals remain disabled unless you grant Marketing consent.

You can accept or reject non-essential categories in the cookie banner and change your choice using “Cookie settings” in the website footer. Browser controls can also block or delete cookies, but blocking essential storage may prevent sign-in or other features from working.

6. How We Disclose Data

We disclose data only as reasonably needed for the purposes above:

Infrastructure and operations: hosting, content delivery, database, logging, security, and support providers.
AI providers: model providers used for the requested feature.
Analytics and error monitoring: providers such as Google Analytics, PostHog, and Sentry, subject to applicable controls.
Advertising and campaign measurement: Google and Meta when you consent to Marketing cookies.
Payments and referrals: Stripe and any affiliate or referral provider used for an applicable program.
Connected platforms: services you direct Orbitr to read from or write to.
Professional advisers: auditors, insurers, lawyers, and accountants under appropriate duties of confidentiality.
Legal, safety, and corporate events: where required by law, needed to protect rights and safety, or involved in a financing, merger, acquisition, or sale, subject to applicable safeguards.

We do not sell personal data for money. If you consent to Marketing cookies, we may disclose online identifiers and website activity to Google and Meta for advertising measurement, audience matching, and personalized or targeted advertising. Applicable U.S. state law may define this disclosure as “selling,” “sharing,” or targeted advertising even though no money changes hands. Reject Marketing cookies or use “Cookie settings” in the footer to opt out of future disclosures. Withdrawing consent does not affect processing that occurred before withdrawal. We do not knowingly sell or share sensitive personal data for these purposes.

7. Google API Data

Orbitr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve the user-facing feature you authorized, for security, to comply with law, or as otherwise permitted by that policy. We do not use Google Workspace API data for advertising or to train general-purpose AI models.

8. Retention and Deletion

We retain data for the shortest period reasonably needed for the purposes described here. Account and customer data generally remain while the account is active. Security, billing, audit, publication, rollback, and transaction records may remain longer where needed for integrity, dispute resolution, contractual obligations, or law. Retention also depends on the customer's configuration and the type of connected data.

Self-service account deletion cancels or deactivates applicable access and integrations and anonymizes the user account, subject to ownership-transfer and security checks. Some records may be retained in restricted form for legal, fraud-prevention, financial, backup, and audit purposes. Disconnecting an integration stops future access but does not automatically delete all data previously incorporated into reports, tasks, or required audit records. You can request further deletion review by contacting us.

9. Security

We use administrative, technical, and organizational safeguards designed for the nature of the data and Services, including access controls, encrypted transport, secret protection, tenant-scoped authorization, monitoring, and backup and recovery practices. No system is completely secure. Notify us promptly if you believe an account or integration has been compromised.

10. International Transfers

Orbitr is based in the United States, and our providers may process data in the United States and other countries. Where required, we use recognized transfer mechanisms and contractual safeguards. You may contact us for information about the mechanism relevant to your data.

11. Your Rights and Choices

Depending on your location, you may have rights to know or access personal data, correct it, delete it, receive a portable copy, restrict or object to processing, withdraw consent, opt out of certain uses, and appeal a denied request. You may also lodge a complaint with your local data-protection authority.

Use account and integration settings for available corrections, disconnections, and deletion.
Use the email unsubscribe link to stop marketing messages.
Use Cookie settings in the footer to withdraw optional cookie consent.
Email info@getorbitr.com for a privacy request or appeal.

We will verify your identity and authority before completing a request. Authorized agents may submit a request where permitted by law. We will not discriminate against you for exercising a privacy right.

12. Children

The Services are intended for business users age 18 or older. We do not knowingly collect personal data from children under 13 or knowingly offer the Services directly to minors. Contact us if you believe a child provided personal data to Orbitr.

13. Changes to This Policy

We may update this policy as the Services or law changes. We will post the effective date and provide additional notice or request consent when required. Material changes do not apply retroactively where law requires a different process.

14. Contact

Orbitr LLC
8 The Green STE B
Dover, Kent County, DE 19901
United States
info@getorbitr.com