Zero data retention
Requests may only go to endpoints that do not retain prompts or responses. The same rule covers temporary chats and agent runs.
Orbit / Privacy
Zero data retention. Enforced on every model request.
The AI that doesn’t spy.
Your prompts and the file excerpts sent with them go only to AI endpoints with zero data retention, and providers that collect or train on data are excluded. If Orbit cannot find a route that meets both rules, it stops the request instead of sending it anyway.
Web search is separate. Search is on by default when available for Guest, Free and paid accounts. Everyone can enable True Zero Data Retention in Settings to disable all new web searches and keep regular AI messaging. Search queries sent through Parallel follow its own retention and data-use terms, including possible improvement or training use; they are not covered by model zero retention. Only the current question is used, excluding prior messages, files, project details and preferences. Your search-off choice is stored in your workspace and applies across tabs. Turning it on does not recall a query already sent. Saved Orbit chats and account records remain stored under our privacy policy.
We never sell your data. Not your prompts, not your files, not your account details.
Every AI model request, checked before it leaves
A compliant route
- Zero data retention required
- Provider data collection denied
- Approved zero-retention routes only
Sent. The provider retains nothing.
No compliant route
- Zero data retention required
- Provider data collection denied
- Approved zero-retention routes only
Stopped. Nothing is sent.
An example of the checks Orbit makes on every AI model request.
Three rules, each enforced in code.
These are not settings you have to find and switch on. They are applied to every live AI request, and automated tests fail if they are removed.
No provider data collection
Providers that collect prompts or may train on them are excluded, so your work is not available to them for training.
Fail closed
The route is pinned and fallbacks are off. If no compliant route is available, the request fails with an error. It is never quietly sent somewhere weaker.
What “doesn’t spy” means.
A slogan is only worth something if it is specific. This is the promise, in six parts, and each one can be checked.
Nothing kept by the AI
Every AI model request is limited to zero-data-retention endpoints. Orbit’s AI partners keep none of your prompts or replies. Web search is the one separate case, explained below.
No tracking
No analytics, advertising or tracking code in this site or in the app, and no cookies on this site. Open your browser’s network tab and look.
Never sold
We never sell your data: not your prompts, your files or your account details.
Not used for training
Providers that collect prompts or may train on them are excluded from every model request, and Orbit does not train models on your work. Web search queries follow the search provider’s own terms.
Logs without your words
When something fails, Orbit logs the route and the kind of failure. It does not log what you wrote.
Nothing hidden
The data map below lists everything Orbit does keep, so the promise is not hiding a footnote.
What it does not mean. Your saved chats and files are stored in your account workspace so you can come back to them, until you delete them. Account, billing and usage records are kept to run the service. Zero-retention endpoints may hold a prompt in memory while a request runs. Web search is the exception. Its queries go to a search provider under that provider’s own retention terms, which is why you can switch it off: turn on True Zero Data Retention in Settings to disable all new web searches. If you want nothing saved, use a temporary chat. The full list is in the data map.
Follow one message.
What happens, in order, from the moment you press send.
- 01
You write
Unsent drafts stay in your own browser’s storage, so a reload does not lose them. Nothing has left your device yet.
- 02
Orbit picks what is needed
Recent messages, the few most relevant excerpts of your files, project brief items and your saved preferences. Older messages are summarised to keep requests small.
- 03
The route is checked
Zero data retention required, data collection denied, approved route only. No compliant route means the request stops here.
- 04
The reply comes back
Orbit’s AI model partners keep none of the prompt or the reply. Orbit verifies the quotations in the answer against your files.
- 05
You decide what is kept
Saved chats go to your isolated workspace. Temporary chats are never saved. You can export or delete your workspace at any time.
What is sent, and what is not.
- Recent messages from the conversation
- The few most relevant excerpts from your files
- Project brief items and your saved preferences
- Your whole files. Only relevant excerpts are used
- Your payment details, which only Stripe handles
- Orbit’s keys and server secrets, which never reach the browser or the model
The honest data map.
Zero data retention covers Orbit’s AI model partners. Orbit still has to store some things to work as an account. Here is all of it.
By Orbit’s AI model partners
- Your prompts and the file excerpts sent with them
- The model’s answers
- Temporary chats, which use the same routing
Zero-retention endpoints may hold data in memory while a request runs. The industry definition of zero data retention permits in-memory prompt caching.
In your account workspace
- Saved chats, files, documents, project briefs, drafts and preferences
- Stored in your own isolated workspace in Supabase, in Sydney
- Exportable and deletable by you, in Settings
Temporary chats are never saved, searched or used for project memory.
By Orbit, to run the service
- Your email address and sign-in (Supabase)
- Subscription and payment details (Stripe). Orbit does not store card numbers
- Usage and billing totals, to enforce allowances
- Hashed IP addresses for abuse limits, and an encrypted sign-in cookie
- Request metadata such as token counts and latency (AI infrastructure)
These remain when you delete your workspace content, so allowances and subscriptions stay accurate. None of it is sold.
Protected while it is stored.
Basic protections you can rely on, described without exaggeration.
Isolated workspaces
Each account has its own workspace. Saved work is not mixed into a shared pool.
Sign-in you control
You sign in with an emailed verification code. Your browser holds an encrypted, HttpOnly session cookie.
Keys stay on the server
AI keys and server secrets never reach your browser.
Abuse limits without addresses
IP addresses are hashed for rate limiting rather than stored as they are.
Check it yourself.
Privacy claims are easy to make. These are ones you can test.
This site tracks nothing
No cookies, no analytics, no advertising scripts and nothing loaded from other companies. Open your browser’s network tab on any page of this site and you will see only Orbit’s own files.
Export and delete everything
Settings downloads all your saved work as JSON or deletes it all. Orbit’s data is yours to take or remove.
Control your saved work
Choose a temporary chat when you do not want it saved to history. Account, usage and billing records are handled as described in our privacy notice.
Privacy questions
Is it really zero data collection?
Not literally, and we would rather say so. An account needs an email address and a subscription needs payment details, and Orbit keeps usage totals to enforce your allowance. What is zero is model processing: providers retain none of your prompts or responses and do not collect them. The data map above lists everything Orbit keeps.
Do you sell my data?
No. NovaSoft does not sell your data, including your prompts, files and account details. The only other companies involved are the ones needed to run Orbit: Supabase (account and workspace), Stripe (payments) and our AI infrastructure partners (model processing), each for the purpose described on this page.
Are my chats used for AI model training?
AI model requests exclude routes that collect or train on your prompts. Optional web search has separate data-use terms, as explained above.
What does “zero data retention” leave out?
It describes what Orbit’s AI model partners keep of your prompts and responses. It does not cover your saved chats and files, which live in your account workspace until you delete them, or account, billing and usage records. Request metadata such as token counts is kept, and zero-retention endpoints may cache prompts in memory.
What if a zero-retention route is not available?
The request fails with an error. Orbit does not fall back to a route that retains or collects data.
Do temporary chats get different treatment?
Temporary chats are not saved to history, search or project memory, and their text uses the same zero-retention routing as everything else. They are described as temporary, not as separate from AI processing.
Where is my saved work stored?
In your own isolated workspace in a dedicated Orbit project in Sydney, Australia. Some sign-in and service processing may happen elsewhere. See Privacy and data for the full detail.
Try it on a document you already have.
Open Orbit, attach a file, and ask the question you would normally spend an afternoon on.