Legal

Privacy Policy

Last updated: May 29, 2026

What We Collect

When you use Orbel, we collect the following information:

  • Account information — email address and password hash when you sign up.
  • Chat messages — the text you send and receive in conversations, stored per account.
  • Token usage — monthly counts of AI tokens consumed, used to enforce plan limits.
  • Analytics events — page views, button clicks, and session starts to understand how the product is used. No personally identifiable information beyond anonymized session data.
  • Billing information — handled entirely by Stripe. We do not store credit card numbers or billing details on our servers.

How We Store and Protect Data

All data is stored in a PostgreSQL database hosted by Neon, with encryption at rest. Data in transit is protected by TLS/SSL. We use Cloudflare Turnstile to protect our login and signup forms from bots — this service operates independently under its own privacy policy.

We do not sell, rent, or share your personal data with third parties for advertising purposes.

Data Retention and Deletion

You can delete your account at any time from the Settings page. Account deletion permanently removes:

  • Your email address and password hash
  • All conversation history and messages
  • Analytics events associated with your account
  • Token usage records

Deletion is irreversible. Once removed, your data cannot be recovered.

Third-Party Services

  • OpenAI — AI responses are generated using OpenAI's API. Your messages may be processed by OpenAI in accordance with their privacy policy. Orbel does not use your conversations to train OpenAI models.
  • Stripe — payment processing. Stripe collects and processes payment information subject to their privacy policy. We receive only subscription status and customer identifiers.
  • Neon — primary database. See Neon's privacy policy.

Cookies and Tracking

We use cookies for the following purposes:

  • Session cookies — required for authentication. These are httpOnly cookies that maintain your logged-in session. They are essential and cannot be disabled without logging you out.
  • Analytics cookies — optional. Used to track how visitors use the site. You can decline these via the cookie consent banner on your first visit. Declining does not block access to the site.

Our analytics system is operated by Polsia and used solely for product improvement. It does not track you across unrelated websites.

Children's Privacy

Orbel is not intended for children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal data, please contact us at privacy@orbel-ai.polsia.app and we will delete that data promptly.

California Residents — CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know — You may request disclosure of what personal information we collect, use, and share about you.
  • Right to Delete — You may request deletion of your personal information, subject to certain exceptions.
  • Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights.
  • Right to Opt-Out — You may opt out of the sale of personal information. Orbel does not sell personal information.

To exercise any of these rights, contact us at privacy@orbel-ai.polsia.app. We will respond within 45 days.

Categories of personal information we have collected in the past 12 months: identifiers (email), chat content, and usage metrics. We do not sell this information.

International Users

If you are accessing Orbel from outside the United States, your data will be transferred to and stored in the United States. By using Orbel, you consent to this transfer.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the email associated with your account (for Plus/Pro users) or by posting a notice on the Orbel website. The "Last updated" date at the top of this page reflects the date of the most recent revision.

Contact Us

For privacy-related questions, data deletion requests, or to exercise your CCPA rights, contact us at:

privacy@orbel-ai.polsia.app

We aim to respond to all legitimate requests within 45 days.