Encrypted, coming and going
Everything you send to Orbit travels over encrypted connections (TLS), and it stays encrypted at rest on our servers.
In plain terms: your data is scrambled so it can't be read if anyone ever got to the disk.
Your network is yours. We treat it that way.
Your relationships are some of the most sensitive data you have. Orbit is built and operated to protect them — encrypted, isolated to your account, and only ever accessed to run the features you turn on.
Walled off to you
Every account is isolated by row-level access controls at the database level. Your network lives in your account and nobody else's.
In plain terms: another Orbit user can never see your contacts, and you can never see theirs.
We only take what we need
When you connect an account, we request the least access necessary to map your network. We read who you talk to and when — not what you said. We deliberately don't request access to your email contents.
In plain terms: Orbit builds your relationship map from metadata, not the words in your messages.
Your keys stay protected
The tokens that let Orbit connect to your accounts are guarded and used only to import the data you authorize — never shared, never sold.
In plain terms: connecting an account doesn't hand your logins to anyone.
You're always in control
Disconnect any account, delete individual contacts, or delete your entire account at any time. Revoking access stops future imports immediately.
In plain terms: it's your data, and you can take it back whenever you want.
Built on trusted infrastructure
Orbit runs on reputable, SOC 2-aligned cloud infrastructure with managed databases, automated backups, and continuous monitoring. We follow the principle of least privilege across our systems.
In plain terms: the foundation Orbit is built on is the same one trusted by serious companies.
Honesty about what we can and can't see
We think trust is earned by being precise, not by overpromising. So here is the straight answer: your data is encrypted in transit and at rest, and it is strictly isolated to your account. To actually run Orbit's features — enriching a contact, mapping a warm intro path, answering a search — our systems process your data on your behalf. We access it only for that purpose, our internal access is limited and monitored, and you can revoke access or delete your data at any time.
We don't sell your data, we don't read the contents of your messages, and we request the least access we need from every account you connect. If that ever changes, you'll know.
Found a security issue?
We investigate all reports and appreciate responsible disclosure. Email security@orbitmy.co.