Privacy Policy

Last updated: 2026-10-02

AI Product Builder is a service from Orbittly, operated by Aanchal Dahiya. It gives your AI assistant a step-by-step process for planning, building, verifying, and auditing software. To use it, you sign in with your Orbittly account. It has no ads. It does not intentionally store what you or your AI send it. The only things kept are short technical request logs (for up to 7 days), a daily count of how many requests your account has made (deleted when the day ends), and any email you choose to send to support.

Privacy contact: info@orbittly.com

What information we handle

• Tool inputs: Your AI assistant may send short summaries, such as a product idea, a change plan, or test results, so the service can return guidance. We process them only to produce the response. We do not intentionally save them, build profiles from them, use them to train AI models, or use them for advertising. Please do not send passwords, API keys, personal data, full repositories, or confidential source code. The service does not need them.
• Technical request data: To run and protect the service, basic request details are recorded: the page or endpoint requested, the request method, the response status, how long the request took, and the service version. Our hosting provider, Cloudflare, also processes network information such as your IP address to deliver the service and apply rate limits that prevent abuse. We do not use this to identify or track individual people.
• Sign-in: Each request from your AI assistant carries a sign-in token issued by your Orbittly account at orbittly.com. The service checks the token to confirm your account includes the AI Product Builder and which plan it is on, then discards it. It never receives your password, name, or email, and it does not store the token.
• Daily usage count: To apply the daily request limits, the service keeps a one-way hash of your account identifier (a scrambled value that cannot be turned back into the identifier) and the number of requests your account made that day (UTC). It is deleted shortly after the day ends. It contains nothing you sent.
• Support emails: If you email us, we receive your email address and whatever you write. We use it only to answer you.
• What we do not collect: passwords (your Orbittly account is managed at orbittly.com under its own privacy policy), payment details, location, advertising or analytics trackers, or the contents of your code or repository.

How we use information

• To return the guidance you asked for.
• To keep the service secure, reliable, and free from abuse.
• To answer support questions.
• We do not sell your information and we do not share it for advertising.

Who we share information with

• Cloudflare: hosts the service, applies rate limits, stores the daily usage counts, and keeps short request logs. It receives the technical request data described above.
• Orbittly accounts (orbittly.com): issues the sign-in tokens and publishes the public keys used to check them. The service downloads those public keys; it sends no user data to do so.
• GitHub: we keep the service's guidance files in a private repository that the service reads. No user data is sent to it.
• Apple (iCloud Mail): delivers the support emails you send us.
• We may disclose information if the law requires it, or to protect the service from abuse or attack.

How long we keep information

• Tool inputs and outputs: not intentionally stored.
• Technical request logs: up to 7 days, then deleted automatically.
• Daily usage counts: until shortly after the end of that day (UTC), then deleted automatically.
• Support emails: up to 12 months, then deleted.

Your controls

• Choose what you share: send only short, non-sensitive summaries.
• Disconnect any time: remove the connector from your AI assistant, and its access ends. Deleting your Orbittly account also ends it.
• Ask about your data: email info@orbittly.com to ask what we hold about you, or to have a support email deleted. We will respond within 14 days.

Children

The service is not directed to children under 13, and we do not knowingly collect information from them.

Changes

If we change this policy, we will update the date above. Continued use after a change means you accept the updated policy.