Privacy, in sentences you can read.
This notice covers the Orbit website and the Orbit desktop app. It is written to be understood, not to be survived.
Last updated 1 November 2026 · Applies to Worlds End, the maker of Orbit
Draft: this hasn’t been reviewed by a lawyer yet and may change before Orbit’s public launch.
Who we are
Worlds End ("Orbit", "we") makes Orbit. We provide a studio operating system: project tracking, media review and delivery, invoicing, and voice rooms. For studio data we are a processor; the studio is the controller. For account and billing data we are the controller.
Privacy questions: send us a message.
What we collect
Account data. Name, email, password hash, studio membership, role, and the devices you sign in from. If you enable two-factor authentication we store a TOTP secret and recovery-code hashes.
Studio data. Projects, clients, tasks, assets you upload, review notes and drawings, delivery links, invoices, and voice-room metadata (who joined, when, for how long).
Billing data. Orbit doesn’t take payments during the beta, so we hold no card details. When billing starts, this section will say exactly what is kept.
Usage data. Page and feature events, error reports, browser and OS version, and IP address. We use this to keep the product working, not to build an advertising profile.
Support data. Whatever you put in an email or a support form, including attachments.
Why we collect it
- To run your account — authentication, permissions, and the studio you belong to. Legal basis: performance of a contract.
- To deliver the product — store media, generate review links, send invoices, connect voice rooms. Contract.
- To bill you — subscriptions, tax, receipts. Contract and legal obligation.
- To keep it secure — audit logs, abuse prevention, rate limiting. Legitimate interest.
- To improve it — aggregated usage and error data. Legitimate interest, with an opt-out for product analytics in Settings.
- To email you — transactional mail always; product news only if you opt in. Consent, withdrawable at any time.
We do not sell personal data, and we do not use studio media to train models.
Your clients' media
Media you upload belongs to you and your clients. We store it to serve it back to you and to the people you explicitly share it with. Access is authorised per request against your role and the scope of the link.
We do not view studio media except where you ask us to for support, or where we are legally compelled. When support needs to see a file, we ask first and log the access.
Deleting an asset removes it from storage and invalidates existing links. Encrypted backups roll off within 30 days.
Cookies and local storage
We use cookies only for what the product needs to work:
- Session cookie — keeps you signed in. HttpOnly, Secure, SameSite=Lax.
- CSRF token — protects write actions.
- Preferences — theme, sidebar state, billing-period toggle. Stored locally in your browser.
We do not run third-party advertising cookies or cross-site trackers. Product analytics is first-party and can be turned off in Settings → Privacy.
Who we share with
Only the subprocessors needed to run the service, each bound by a data-processing agreement:
- Supabase — sign-in, database, file storage and server functions, including website form messages.
- OpenRouter — the AI models behind Ask Orbit, only when you use it.
- Adobe Frame.io — only if you connect a Frame.io account.
- GIPHY — GIF search in messages, only when you search.
- GitHub — hosting desktop update downloads; no studio data.
We may also disclose data if required by law, or to protect the rights and safety of our customers. If Orbit is acquired, data transfers with the business, and we will tell you before your data becomes subject to a different notice.
How long we keep it
- Account and studio data — while the studio is active, then 30 days after deletion, then purged.
- Invoice records — seven years, as required for tax.
- Audit logs — 90 days.
- Error reports — 30 days.
- Backups — 30 days, encrypted at rest.
Your rights
Depending on where you live, you may have the right to access, correct, export, delete, or restrict processing of your personal data, and to object to processing based on legitimate interest. To exercise any of these, send us a message from the email on your account. We respond within 30 days.
Studio owners can export the whole studio as JSON and media via Settings → Data. Client guests can ask the studio that invited them to remove their data; we will assist the studio.
If you believe we have handled your data badly, you can complain to your local supervisory authority. In Canada, that is the Office of the Privacy Commissioner.
International transfers
Our infrastructure is primarily in the United States and the European Union. Where data moves out of the EEA or the UK, we rely on Standard Contractual Clauses and the subprocessor agreements listed above.
Changes
If we change this notice in a way that materially affects you, we will email account owners at least 14 days before the change takes effect and keep the previous version available on request.
Contact
Worlds End
Privacy, security or anything else: send us a message and choose the matching topic.
This notice is a prototype document for the Orbit website design. It is not legal advice and has not been reviewed by counsel.