Privacy Policy

The short version

Orbit helps small circles of friends find time to hang out together. We see when you're free — never what you're doing. We don't read your inbox, we don't sell your data, and we never make your profile, circles, or events public.

1. Who we are

Orbit ("we", "us", "our") is operated by the Orbit team. You can reach us at hello@weorbit.org. The service lives at weorbit.org.

2. What we collect

• Account info — email, display name, optional avatar choice and city, password (hashed) if you sign up with email.
• Circles & events — names of your circles, who you invite, and hangouts you create or accept.
• Calendar availability — if you connect Google Calendar, we read free/busy windows to find when your circle overlaps. We do not store your event titles, attendees, or descriptions.
• Optional location — a city or address you provide so we can suggest venues nearby.
• Basic technical data — IP, browser, and minimal logs needed to keep the service running and secure.

3. What we don't collect

• The titles, descriptions, or guest lists of your calendar events.
• The contents of your inbox or any other Google Workspace data.
• Your contacts, photos, or files.
• Precise GPS — only the city/address you choose to share.

4. Google API data

Orbit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We request only the calendar scopes needed for free/busy reads and (optionally) writing the hangouts you confirm.
• We never use this data to train AI models.
• We never share or sell this data.
• You can revoke access anytime in your Google Account.

5. How we use your data

• Run the core product: circles, invites, hangouts.
• Compute mutual availability and venue suggestions.
• Send transactional email (invites, magic links, reminders).
• Keep the service safe (rate limiting, abuse prevention).

6. Sharing

We share data only with vendors strictly necessary to operate the service (hosting, database, email delivery). We never sell personal data. We may disclose data if required by law, but we'll push back on overbroad requests.

7. Storage & security

Data is stored on secure managed infrastructure with encryption in transit and at rest. Access is limited to a small number of engineers and audited.

8. Your rights

You can view, edit, export, or delete your data at any time. To delete your account or request a copy, email hello@weorbit.org. If you're in the EU/UK, you have rights under GDPR (access, rectification, erasure, portability, objection); we'll honor them within 30 days.

9. Children

Orbit is not directed to children under 13 (or 16 in the EU).

10. Changes

If we make material changes, we'll notify you in-app or by email before the changes take effect.

11. Contact

Questions? Email hello@weorbit.org.