Privacy Policy

Last updated June 2026

Orbit helps you remember and tend the people you talk to on Substack. This policy explains what the Orbit browser extension and website do with your information. The short version: your Substack login never leaves your computer, and we only ever receive the conversations and people, never your password.

How the extension works

The Orbit extension runs in your own browser and reads your Substack using the session you’re already logged into. It then sends a normalized copy of your conversations and the people in them to your Orbit account. We never see, receive, or store your Substack password or login cookie.

What we collect

• Public comments and notes from your Substack activity — yours, and those of the people who engage with you.
• Public profile details of people in your orbit: name, handle, bio, photo, follower/subscriber counts, and any links they list on their profile.
• Your subscriber list metadata — counts, tier, and join date. We never collect subscriber email addresses.
• Performance stats for your own notes and published essays (and the plaintext of your essays, used to understand your themes).
• Your direct messages — only if you explicitly turn on “Include direct messages,” which is off by default.
• If you choose to research a person, we search the public web for publicly available information about them.

What we do not collect

• Your Substack password or login/session cookie.
• Your subscribers’ email addresses.
• Payment card details (any billing is handled by our payment processor, not stored by us).

How we use your information

We use it only to build your private view of your relationships — summaries, groupings, who to reconnect with, and what’s resonating in your writing. We use Anthropic’s Claude API to generate those summaries from your captured data. We do not sell your data, and we do not use it for advertising or for any purpose unrelated to providing Orbit.

Where it’s stored, and who can see it

Your data is stored in a secure cloud database, scoped to your account. It is not shared with other users. We rely on a small set of service providers to run Orbit: Supabase (database), Vercel (hosting), and Anthropic (AI summaries; processed, not used to train their models). Web research, when you run it, may query public search engines.

Your choices

• Direct messages stay off unless you turn them on, and you can turn them off again anytime.
• You can disconnect the extension at any time to stop all syncing.
• You can ask us to delete your account and all associated data (see Contact).

Retention

We keep your data for as long as your account is active. When you ask us to delete it, we remove your captured data and account from our database.

Contact

Questions, or want your data deleted? Reach us through the support form.

Terms · Support · About Orbit