Privacy Policy

Last updated: May 26, 2026

Introduction

Orbit Mail ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our email client application at myorbitmail.com and related services.

Information We Collect

When you create an account, we collect your chosen username and the authentication credentials needed to sign in. When you connect an email provider (Gmail, Outlook, or iCloud), we securely store OAuth tokens or app-specific passwords required to sync your mail. We do not store the contents of your emails on our servers beyond what is necessary for real-time syncing and display within the app.

How We Use Your Information

We use your information solely to provide and improve the Orbit Mail service, including syncing your email across providers, powering AI-assisted features (such as smart replies, summaries, and contact analysis), and maintaining your account. We do not sell, rent, or share your personal information with third parties for marketing purposes.

Third-Party Services

Orbit Mail integrates with the following third-party services to deliver its functionality:

Supabase (supabase.com) — provides our authentication, database, and serverless edge functions. Stores account profile data, OAuth tokens, synced email metadata and bodies, folders, contacts, and user settings. Hosted in the United States. Data is protected by row-level security so only the account owner can read it.
OpenAI (openai.com) — powers all AI-assisted features in the app (AI Assistant chat, Inbox Cleanup, AI Summaries, Quick Reply suggestions, and Draft Reply). When you enable AI features and use one of these features, Orbit Mail sends the following data to OpenAI's API over HTTPS: (a) the email subjects, bodies, and sender/recipient addresses of the messages the feature acts on, (b) any prompt text you type into the AI Assistant, and (c) a short instruction describing the task. OpenAI processes the request and returns a response. Per OpenAI's API data-usage policy, data sent via the API is not used to train OpenAI's models and is not retained by OpenAI beyond what is needed to process the request. OpenAI is contractually obligated to provide a level of data protection equal to that described in this policy. AI features are off by default; you must explicitly grant consent inside the app before any data is sent, and you can revoke consent at any time in Settings → AI & Privacy.
Google, Microsoft, and Apple — handle OAuth-based authentication when you connect a Gmail, Outlook, or iCloud account. We only receive the access tokens you authorize.
Stripe — handles payment processing if and when paid features are introduced (not currently used in v1.0).

We do not share your personal data with any third party other than those listed above, and only for the purposes described. We do not use your data to train any AI model.

Data Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure token storage, and row-level security policies on our database. OAuth tokens are stored securely and are never exposed to the client application.

Data Retention and Deletion

Your account data is retained as long as your account is active. If you disconnect all email providers and sign out, your account and associated data may be automatically deleted. You may request deletion of your data at any time by contacting us.

Your Rights

You have the right to access, correct, or delete your personal data. You can disconnect email providers at any time from within the app, which revokes our access to that provider. To request full account deletion, contact us at the email below.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, contact us at support@myorbitmail.com.