Privacy Policy
How Orbit (a macOS desktop product by Graond) handles your local workspace files, license verification, and personal data.
Your Privacy Comes First
Orbit saves everything directly on your Mac. All your workspace settings, app lists, project folders, web links, and window positions are stored on your device, not on our servers. We never sync your personal setup to the cloud, and we never sell your data to anyone.
What Stays 100% Exclusively on Your Mac
Your workspace setup never leaves your device and is stored in your local macOS user directory with strict POSIX permissions.
~/Library/Application Support/Orbit/config.jsonconfig.json)Custom profile names, color tags, installed Mac app paths, local project folders, and startup items, locked with 0600 owner-only permissions.
Targeted browser URLs and custom browser assignments configured inside your spaces.
Project notes, saved snippets, and masked credentials (••••••) remain 100% on your disk.
Multi-monitor window positions, hotkeys, exported .json/.csv Blueprints, local license cache (license.dat, device_history.dat), and local ticket history (feedback_history.json).
What We Store on Our Servers
We only process the minimum data required to issue licenses, verify seats/trials, and answer support requests.
Stores your email, license key, tier, Mac host name (instance_name), model identifier (model_name), macOS & app version, SHA-256 device fingerprint (instance_id), platform UUID (hardware_uuid), and primary MAC address (device_mac) strictly to enforce seat limits and the 1-trial-per-Mac policy. Raw hardware serial numbers are hashed locally and never sent in plain text.
When you submit a ticket in Feedback & Support, we receive your message, category, optional email, any screenshots/files or voice recording you explicitly attach, and an optional diagnostic summary (OS/app version, CPU architecture, screen resolution, and aggregate workspace/app/link counts).
Disabled by default (shareAnonymousStats = false). If voluntarily enabled in Settings, sends only high-level aggregate counts (os_version, app_version, architecture, workspaces_count, estimated_time_saved_minutes), and never names, project paths, or URLs. All error and crash diagnostics pass through an automated sanitizer that replaces user home paths (/Users/username) with ~ and redacts credentials, API keys, and tokens to guarantee zero personal data leakage.
Checks orbit.graond.com/appcast.xml over HTTPS via the Sparkle framework (with system profiling disabled: SUEnableSystemProfiling = false) and verifies updates using Ed25519 cryptographic signatures.
No Ads, No Data Selling & Third-Party Processors
We never monetize your data. Below are the only infrastructure providers used to operate Orbit.
Processes checkout, global sales tax/VAT, billing receipts, and refunds. Orbit and Graond never store your payment card numbers.
Stores encrypted license seat records and support tickets with strict row-level security controls.
Delivers your license keys, recovery emails, and support replies from support@graond.com.
Data Retention Timelines
Structured retention schedule for every category of data.
~/Library/Application Support/Orbit/)100% On Your Mac (under your control)Your Right to Delete Your Data
Three immediate ways to erase local files, release device seats, or delete server records.
A. Delete Local On-Device Data
Remove all local workspace profiles, license caches, and local feedback logs on your Mac:
rm -rf ~/Library/Application\ Support/OrbitB. Deactivate Device Seat In-App
Inside Orbit on macOS, open Plans & Upgrade in the sidebar, click Turn Off next to Turn Off License on This Mac, and confirm Turn Off on This Mac to release your seat immediately.
C. Request Permanent Cloud Data Erasure
Permanently erase your email, license records, and support history within 48 hours.
Children's Privacy (COPPA)
Orbit does not knowingly collect personal information from children under 13 (or 16 where applicable).
Orbit is a productivity workspace tool intended for general audiences and professionals. We do not knowingly collect or solicit personal data from children under 13 (or under 16 where applicable by law). If we learn that personal information has been collected from a child without parental consent, we will promptly delete it.
How We Keep Your Data Safe
Defense-in-depth protections on your Mac and across our licensing endpoints.
All license checks use TLS encryption over HTTPS, and Sparkle updates are verified with Ed25519 cryptographic signatures before extraction.
Built with macOS security protections enabled to prevent unauthorized code injection or runtime tampering.
0700 / 0600)Orbit restricts ~/Library/Application Support/Orbit (0700) and config.json (0600) exclusively to your macOS user account.
Active license state is encoded locally in license.dat and hardware trial bindings are secured in macOS Keychain (com.orbit.Orbit.license).
Internal AppleScript commands and links are strictly validated against malicious protocols. All diagnostic logs automatically convert system user directories to ~ and redact tokens, keys, and credentials before transmission.
Contact & Data Protection Inquiries
Official Data Controller identity and privacy contact details.