Privacy Policy

Last updated: July 16, 2026

Orbs (4orbs.ai, the "Service") is a research tool that answers questions with citations drawn from publicly available sources. This policy explains what personal data we collect, why, and what your rights are. The Service is operated by Alexandre Martens (the "Operator"). Questions about this policy: contact@4orbs.ai.

What we collect

Account data. Your email address, and — if you sign in with Google — your name and profile image as provided by Google. We never see or store passwords: sign in works via emailed magic links or Google OAuth.
Your activity. The questions you ask in chat and the sessions they belong to, your bookmarks and notes, and a daily count of how many chats you've used (this enforces the daily usage limits).
Technical data. Essential session cookies, IP-derived rate-limiting counters, and server logs with request identifiers and error details. We use no advertising trackers and no analytics cookies.

How we use it

To operate the Service: signing you in, answering your questions, keeping your chat history and bookmarks attached to your account, and enforcing usage limits.
To send you sign-in emails (the only email we send unless you ask for more).
To keep the Service reliable and secure: debugging with error logs, and rate limiting to prevent abuse.

We do not sell your data, and we do not use it for advertising.

Who processes it

The Service runs on infrastructure providers that process data on our behalf:

Our hosting provider (server logs) and our managed Postgres database provider (account and activity data).
Resend sends the sign-in emails; Google handles authentication only if you choose "Continue with Google".
AI model providers (currently OpenAI, and Cohere for search ranking) process the text of your questions to produce answers. Your questions are sent to them for processing; your email address and account identity are not.

Retention and deletion

Account data, chat history, and bookmarks are kept while your account exists. If your account is deleted, your usage counters and bookmarks are deleted with it, and your chat sessions are detached from your identity. To request account deletion or a copy of your data, email contact@4orbs.ai from your account address — we respond within 30 days.

Cookies

We use only essential cookies: your sign-in session. There are no third-party, advertising, or cross-site tracking cookies, which is why there is no cookie banner.

Age

The Service is not directed at children and requires users to be at least 16 years old.

Changes

We may update this policy as the Service evolves. Material changes will be reflected in the "Last updated" date above, and — for significant changes — announced to signed-in users.

What we collect

Account data. Your email address, and — if you sign in with Google — your name and profile image as provided by Google. We never see or store passwords: sign in works via emailed magic links or Google OAuth.

Your activity. The questions you ask in chat and the sessions they belong to, your bookmarks and notes, and a daily count of how many chats you've used (this enforces the daily usage limits).

Technical data. Essential session cookies, IP-derived rate-limiting counters, and server logs with request identifiers and error details. We use no advertising trackers and no analytics cookies.

How we use it

To operate the Service: signing you in, answering your questions, keeping your chat history and bookmarks attached to your account, and enforcing usage limits.

To send you sign-in emails (the only email we send unless you ask for more).

To keep the Service reliable and secure: debugging with error logs, and rate limiting to prevent abuse.

We do not sell your data, and we do not use it for advertising.

Who processes it

The Service runs on infrastructure providers that process data on our behalf:

Our hosting provider (server logs) and our managed Postgres database provider (account and activity data).

Resend sends the sign-in emails; Google handles authentication only if you choose "Continue with Google".

AI model providers (currently OpenAI, and Cohere for search ranking) process the text of your questions to produce answers. Your questions are sent to them for processing; your email address and account identity are not.

Retention and deletion