Privacy Policy

Last updated: March 3, 2026

1. Introduction

Orbit Core ("we", "us", "our") operates the website orbit-core.org and the Orbit Core software platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our software.

2. Information We Collect

2.1 Information You Provide

  • Registration data: name, email address, and organization name when you register for a license key.
  • Contact data: information you provide when contacting us via email.
  • Account credentials: password (stored as a cryptographic hash, never in plain text) when you set up admin access to a self-hosted instance.

2.2 Automatically Collected Information

  • Analytics: we use Google Analytics to collect anonymized usage data (pages visited, session duration, device type). This helps us improve the website.
  • Telemetry: our website uses OpenTelemetry to collect performance metrics. No personally identifiable information is included.
  • Server logs: standard web server logs including IP address, browser type, and request timestamps.

2.3 Self-Hosted Instances

Orbit Core is a self-hosted platform. When you deploy Orbit Core on your own infrastructure:

  • All observability data (events, metrics, alerts) remains on your servers.
  • We do not have access to your monitoring data, credentials, or configurations.
  • The only external communication is optional license validation and AI connector generation (which sends only connector specifications, not your data).

3. How We Use Your Information

  • To provide and maintain our services, including license key management.
  • To communicate with you about product updates, security advisories, and support requests.
  • To improve our website and software based on usage patterns.
  • To comply with legal obligations.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following cases:

  • Service providers: Google Analytics (website analytics), Anthropic (AI connector generation — only connector specs, no user data).
  • Legal requirements: if required by law or to protect our rights.

5. Data Security

We implement industry-standard security measures:

  • HTTPS encryption for all web traffic.
  • Passwords hashed with cryptographic scrypt algorithm.
  • API keys transmitted via secure headers.
  • Regular security updates and dependency audits.

6. Cookies

Our website uses:

  • Essential cookies: for authentication and session management.
  • Analytics cookies: Google Analytics cookies to understand website usage. You can opt out using browser settings or the Google Analytics Opt-out Browser Add-on.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data.
  • Opt out of marketing communications.
  • Request data portability.

To exercise these rights, contact us at contact@orbit-core.org.

8. Data Retention

We retain your registration data for as long as your account is active. Server logs are retained for 90 days. You may request deletion at any time.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy: