Who runs Orbit

Orbit is operated by JSTN Consulting Pty Ltd (ABN 81 690 388 768), trading as Orbit AI, registered in Queensland, Australia. For privacy matters, contact justin@yourorbit.team or the contact form.

What we collect

Only what's needed to run the site and keep subscribers informed. In plain terms:

Email + first name when you opt in to product updates through the email-capture modal or any sign-up form on the site.
Message content when you submit the contact form (your email, your name if given, and what you wrote).
Anonymous usage analytics via Google Analytics 4: page views, referring site, rough geography from IP, device type, and clicks on key calls-to-action. No personal profile is built.
Aggregated telemetry from the Orbit MCP extension: install counts and tool-invocation counts. This is anonymous and aggregate — no prompts, no customer data, no Braze workspace contents ever leaves your machine.
Approximate country from your IP address, used only to decide whether the consent checkbox for the email-capture modal should be opt-in (EU/UK/Canada) or opt-out (rest of world).

We do not buy or rent mailing lists. We do not collect special-category data (health, ethnicity, political opinions, etc.). We do not knowingly collect data from under-16s.

Why we collect it (lawful basis)

Consent— for marketing emails. You can withdraw at any time via the unsubscribe link in every email, or by replying "unsubscribe" to any message from us.
Legitimate interest — for contact-form replies, anonymous analytics, and fraud prevention.
Legal obligation — for tax and accounting records where a transaction has occurred (Orbit is free, so this is rare).

Who we share it with

Data is stored with service providers who help us run the site. The short list:

Railway — web hosting (US/EU regions).
Neon / Postgres — database for subscribers, form submissions, and visit counts.
AWS S3 — static asset storage for the download artefact and logos.
Google Analytics 4 — anonymous usage analytics. IP anonymisation on, ads-personalisation off.
Web3Forms — contact-form relay so messages reach the founder inbox.

We do not sell data to third parties. We do not share data with advertising networks. We do not participate in data-broker exchanges.

How long we keep it

Subscribers: until you unsubscribe. After unsubscribe, your address is kept on a suppression list indefinitely so we never email you again by accident.
Contact-form submissions: up to 24 months, then purged.
Analytics: 14 months (the GA4 default, non-extensible).

Your rights

Regardless of where you live, you can ask us to:

Tell you what we have on file.
Correct anything that's wrong.
Delete your data ("right to be forgotten").
Export your data in a portable format.
Withdraw consent for marketing emails at any time.
Object to or restrict processing.

Email justin@yourorbit.team with the request. We respond within 30 days.

If you're in the EU/UK and think we've mishandled your data, you can lodge a complaint with your local supervisory authority. If you're in Australia, you can lodge a complaint with the Office of the Australian Information Commissioner.

Cookies and similar tech

The site uses a small set of cookies:

Strictly necessary: auth cookies on /admin, session storage for modal state, and CSRF tokens on forms.
Analytics: GA4 cookies (_ga, _ga_*) with IP anonymisation.

No advertising cookies. No cross-site trackers. No fingerprinting. You can block all cookies in your browser without breaking the public site; /admin will stop working if you block its auth cookie, which is expected.

International transfers

Orbit is operated from Australia. Hosting and analytics providers are located in the EU and US. Where data leaves your jurisdiction, it travels under standard contractual clauses or equivalent safeguards required by the provider in question.

Changes to this policy

If the substance changes, we'll update the "last updated" date and, for material changes, email any active subscribers before the change takes effect.

Privacy policy.