Orbit privacy policy

Last updated 19 October 2026. Applies to the Orbit desktop app (direct download and Microsoft Store), the web app and the browser extension.

What Orbit does

Orbit listens to a conversation you choose (your microphone, and the meeting app's audio if you select it), transcribes it, and shows suggested answers you can read. It runs only when you start a session.

Window privacy (desktop app). Two settings, both off unless you turn them on (Settings → Window privacy): a privacy shield that asks Windows to keep Orbit's window out of screenshots, screen recordings and Windows Recall (display affinity), and hide from the taskbar. The shield is a request to Windows that not every capture tool honours. Neither setting hides Orbit from Task Manager, other programs or anyone who can see your screen. Use Orbit only where assistance is allowed.

What is never stored

• Audio. It is streamed for live transcription and never written to disk.
• Screenshots. They are sent to the AI model to answer a question, then discarded.
• Uploaded files. Only the text extracted from your resume or job description is kept, not the original file.
• Your content in analytics. Transcripts, documents and answers are never sent to analytics or crash reporting.

What is stored, and why

• Your account (email, name, a password hash) so you can sign in. If you turn them on: your two-step sign-in key (encrypted, with your recovery codes kept only as hashes) and, for each passkey, its public key and the name you give it. A passkey's private key stays on your device or in your password manager; Orbit never receives it.
• Your documents' text so answers can draw on your real background.
• Sessions (transcript, questions, answers, report) for your history and review. You can turn off transcript storage in Settings → Privacy.
• Usage (minutes, screenshots) to apply plan limits.
• A security log (sign-ins, password resets, email changes) to protect your account.
• Messages you send us from the Contact page (your name, email, phone number if you give it, the message, and the job you report, if any) so we can answer. A message we've finished with is deleted a year later.

Who processes your data

• Orbit's server and database host your account and history.
• Deepgram receives the audio stream to transcribe it. If the mock interviewer uses a natural AI voice, Deepgram also receives the interviewer's question text to turn it into speech; nothing you say is sent for that.
• Our AI model provider receives the question, relevant facts from your documents and the recent conversation, to write the answer. A backup AI provider receives the same, only if the main one is unavailable.
• Razorpay receives the payment when you buy a pack in India (the amount and the method you choose). Orbit does not receive your full card number.
• PayPal receives the payment when you buy from outside India: the amount, what you're buying and an Orbit reference, plus whatever you give PayPal to pay. Orbit keeps only the payment's id, amount and status, never your card number or PayPal sign-in.
• Cloudflare serves the website, and tells Orbit which country a visit comes from (not your address) so prices show in your currency. If sign-up protection is on, it also checks that a sign-up is from a person. Its Web Analytics counts page views and how fast pages load (the page's address, the browser, the country), without cookies and never with your documents, answers or transcripts.
• Email is sent only about your account: verifying an address, resetting a password, answering a message you sent, or, if you use Orbit Apply, telling you an application needs you (at most once every 6 hours). There is no newsletter. Those emails say so, and point you back to the contact page.
• Crash reporting is off unless a key is configured. It is not allowed to include transcripts, documents, request bodies or your personal details.
• Read aloud uses the voices on your own device, so the answer text is not sent anywhere. Orbit stops listening while it reads.
• The browser extension, if you install it, reads a web page only when you click its button on that page. It sends Orbit only what you choose to save (a job's title, company, location and link) or check (the job's text, compared with your resume and not stored). To fill a form, it gets your name, email, phone and links from your resume and fills them on your device; that kind of fill never submits anything. Only Orbit Apply, if you turn it on, submits applications for you.
• Your camera is used only if you turn it on in a mock interview. The picture stays on your device and is never recorded or sent. If you also turn on the camera coach, a face model runs in your browser and only numbers are saved with that session: how long it measured, how much of that time your face was in frame, how much of that time your head faced the camera, and how much your head moved. No images or face measurements are kept, and nothing is used to identify you or to judge emotion or confidence.

Orbit does not sell your data or use it for advertising.

Orbit Apply (applying for you)

Orbit Apply is off unless you approve your resume, answers, limits and agreement in Jobs → Applications. You choose browser or hosted execution. Browser mode also requires Apply for me automatically in the connected extension. Hosted mode requires a separate authorisation and can continue while your device is off. Direct applications to employers on Orbit Business use the approved rules without a browser.

• Which sites. Only job application forms on Greenhouse (boards.greenhouse.io, job-boards.greenhouse.io), Lever (jobs.lever.co) and Ashby (jobs.ashbyhq.com). Switching it on asks your browser for access to exactly those four sites; switching it off gives that access back. Job boards such as LinkedIn are never filled or submitted automatically. Hosted execution additionally supports employer forms on Workday, SmartRecruiters, Workable and Recruitee. Coverage depends on the employer's form: sign-ins, human checks and unsupported forms require you.
• What Orbit prepares, and with what. For jobs that match the filters you set, Orbit's server prepares each application from what you approved: the resume you chose (reordered or reworded for the job from its own true facts, never with skills or numbers it doesn't have), a short cover letter, the details you confirmed (name, contact details, links, work authorisation and similar) and the answers you saved in your answer bank. Our AI model provider receives your resume's text and the job post to write the cover letter and the rewording. To read each form's questions, Orbit's server fetches the job's public application form from the site. Reading a form is preparation; only your approved execution mode submits it.
• What is sent to the employer. The extension, in your browser, opens the form in its own window labelled "Orbit Apply", fills in those details, answers and the resume, and presses the form's own submit button. In hosted mode an isolated Orbit browser fills and submits the same approved data to the employer, even when your browser is closed. Browser contexts are not shared between applications, and Orbit never stores your job-site passwords or imports your logged-in sessions. Voluntary equal-opportunity questions (gender, ethnicity, veteran or disability status) are answered "decline to self-identify" unless you chose your own answers. A question Orbit has no approved answer for is never guessed: the application stops and asks you. Captchas, sign-ins and email codes are never solved for you: Orbit stops and tells you, in the app and by email, with a link to finish it yourself.
• What is kept as proof. For each application: what was entered into the form, the site's confirmation message and page address, the time, and the resume version sent (also added to your Jobs tracker as Applied). If the browser can take a picture of the confirmation page, that is kept too. This is kept with your account, so you can see what was sent, and deleted with it. A hosted worker may temporarily keep an encrypted receipt while reconnecting to Orbit; it deletes the receipt after acknowledgement or a final stale-attempt rejection. If an account is deleted, delivery of its receipt is rejected and the worker deletes its local copy.
• Limits. At most the daily number you set (never more than 25), two per company in 30 days, spaced out like a person would, and never during the quiet hours you set.
• Turning it off. Pause it at any time from the extension or the web app; switch it off in the extension (which also removes its access to those sites); or withdraw your agreement in the web app's Orbit Apply setup. In hosted mode you can also switch back to browser execution. An application whose submission outcome is uncertain is not sent again automatically: you must check with the employer before retrying.

Your controls

• Delete a session, just its transcript, a document, or a saved setup at any time.
• Download all your data as one file (Settings → Account).
• Change your email, sign out of every device, or delete your account and everything in it (Settings → Privacy). Messages you sent us from the Contact page stay, no longer linked to the account, so we can finish answering them. Ask on the contact page to delete one of those too. If you can't sign in, use the contact page and name the email on the account.

Cookies

The site uses one sign-in cookie and saves settings on your device. It does not use advertising cookies. Details are in the cookie policy.

Age

Orbit is for students and job seekers, including people under 18. Sign-up does not ask your age or date of birth. A parent who wants an account deleted can ask on the contact page.

Microphone and screen

Microphone access is controlled by Windows: the Store version asks for permission, and you can turn access off for either version in Windows Settings → Privacy & security → Microphone. Screenshots are only taken when you press the screenshot button and select an area.

If you're in the UK or the European Union

The UK GDPR and the EU's GDPR give you the rights below. We answer the same requests from anyone, wherever they live.

• Who is responsible. Orbit, an individual service based in India, decides how your data is used (the "controller"). Reach us on the contact page.
• Why we use your data. To run the service you signed up for (your account, sessions, documents and payments): our contract with you. To keep accounts and Orbit safe (the security log, rate limits, stopping misuse of free credits): our legitimate interest in a secure service. Payment records: because accounting and tax law require them. Anything optional you turn on (storing transcripts, the camera coach): your choice, which you can turn off at any time.
• Your rights. You can ask to see your data, to correct it, to delete it, to limit how it's used, to get a copy to take elsewhere, and to object to how it's used. Downloading and deleting are already in Settings. For anything else, write from the contact page; we answer within one month.
• Where your data goes. Orbit's server and database are in Singapore. Deepgram (transcription) works in the United States, our AI model provider outside the UK and the EU, and Cloudflare, PayPal and Razorpay where they run. These countries may not protect personal data the way the UK and the EU do. A session's conversation has to reach these providers for Orbit to transcribe it and write answers; if you'd rather it didn't, don't start a session, or ask us to delete your account.
• How long we keep it. Your account and what's in it: until you delete them or the account. Messages you sent us: a year after we've finished with them. Payment records (the amount, the date and the reference): after an account is deleted too, for as long as accounting and tax law require.
• Complaints. Tell us first. You can also complain to the data protection authority where you live: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, your country's authority.

Contact

Questions or requests about your data: write to us from the Contact page (or use the support contact on Orbit's Microsoft Store listing).