Last updated: June 2026
When you create an account, we collect your email address, name, and workspace name. When you connect APIs, we store your API credentials encrypted in our secure vault (Supabase Vault). We also log actions executed through OrbitAPI for audit purposes.
We use your information solely to operate the OrbitAPI service — authenticating your account, executing API actions on your behalf, and providing audit logs. We do not sell, share, or use your data for advertising.
All API credentials you provide are encrypted at rest using Supabase Vault. Credentials are only decrypted in memory at execution time and are never logged or stored in plain text. You can delete any connection at any time to permanently remove its credentials.
Audit logs are retained for 90 days by default. Conversation history is retained until you delete it. You can delete your workspace at any time, which permanently removes all associated data.
OrbitAPI is built on Supabase (database and auth), Anthropic (AI), and Vercel (hosting). Each processes data according to their own privacy policies. We do not share your connected API credentials with these providers.
For privacy questions or data deletion requests, contact us at our contact page.