How Orbit handles your data
Updated 2 November 2026. Orbit is provided by SabaiDev ([email protected]). The final legal entity, hosting location and retention schedule are still being confirmed; this notice will be updated when they are.
Your Mac and WhatsApp
Orbit links accounts to WhatsApp and keeps local session data, conversation history, contacts, media and file-staging snapshots on your Mac. Those main stores are not encrypted at rest by Orbit. Draft and scheduled-message payloads use encryption with a key held in macOS Keychain. This does not encrypt the other stores or replace Mac account and disk protection.
Orbit does not send your WhatsApp conversation database to a central Orbit server. WhatsApp communication still passes through the WhatsApp service. Orbit uses an unofficial integration and is independent of WhatsApp and Meta.
The direct-download app reads the public release catalog on orbit.sabaidev.la once a day to offer updates. That request carries no account identity or message content, and you can turn it off in Settings › Updates.
If you join the Windows waitlist on this site, SabaiDev stores that email address and the sign-up date only to send one email when Orbit for Windows is available. It is not shared or used for marketing. Ask [email protected] to remove it at any time; the list is deleted after that announcement.
AI hosts and MCP
When you grant MCP access, a connected AI host can receive the account information, messages, contacts, context or files returned by the tools it is permitted to call. That host and any model provider may process the returned data under their own policies. Review account grants and operation permissions before connecting a host. Voice messages and calls are excluded from MCP.
Sorting on this Mac
On plans that include MCP, and on Macs where Apple Intelligence is available and turned on, Orbit can use Apple's on-device model to read recent cached messages and decide who expects a reply and what you promised in messages you sent. This runs on your Mac: the messages and the results are not sent to Orbit, to Apple's servers or to any AI provider, and the results are saved in that account’s folder on your Mac so they aren’t worked out again. Turning sorting off deletes them. You can turn it off in the menu-bar Controls under Today › Sort on this Mac.
Other helpers on this Mac
Translating a message or draft, transcribing a voice message, reading text in an image and summarising a chat use Apple frameworks on your Mac when you ask. Their content and results are not sent to Orbit or to an AI provider; Apple may download language or speech models. If you choose Ask Kepler to catch me up, Kepler reads the chat’s messages through your own Claude account.
Keeping a chat out of AI
Keep Out of AI in a chat’s menu hides that chat from Kepler, connected MCP hosts, on-device sorting and summaries. The list of these chats stays on your Mac (Settings › Privacy) and is not sent anywhere. Pending requests for that chat are closed and its scheduled sends are cancelled; content an assistant already received is not withdrawn.
Direct-Mac licensing and payment
Personal works locally without a Whop purchase. Paid direct-Mac plans are sold through Whop’s hosted checkout, and activating a plan in Orbit signs in with your Whop account. Orbit’s licensing service uses your Whop user identifier, device identifier, session-token hashes, membership status, account allowance and limited billing/webhook metadata to verify access. It does not need WhatsApp message content or contact lists. Application licensing credentials are held in the Mac’s Keychain.
Whop processes checkout and account information under its privacy policy. Hosting and payment providers may process connection or transaction information. Production retention periods are not finalized yet.
App Store purchase flow
A separate App Store build uses Apple StoreKit for product information, purchases and restoring purchases. The prepared flow checks Apple-verified transaction, product, expiry and revocation information locally to determine the account allowance. It does not use Whop sign-in or the Orbit direct-Mac licensing service for StoreKit purchases. Apple processes the purchase under its own account and payment policies. App Store approval, public availability and live purchase acceptance are still pending.
This website
This website never sees card details: purchase buttons open Whop’s hosted checkout. Its pages load Whop’s conversion pixel (from t.whop.tw), which reports page views to Whop and may use browser fingerprinting so Whop can attribute purchases to visits; Whop’s own privacy policy governs that data. It also uses Cloudflare Web Analytics, which counts page visits without cookies or cross-site tracking. It loads its own release configuration and, only when configured, same-origin billing-health and offer information. Hosting may record technical request information such as IP address, request time and path; the operator must confirm logging and retention before release. Signing in to Orbit through your browser sets a short-lived security cookie that binds the Whop sign-in request.
Your choices and deletion
You control which WhatsApp accounts are linked and which MCP clients receive grants. Removing a local account, unlinking a linked device in WhatsApp and ending a billing subscription are different operations. Copies already shared with an AI host, sent to another person or retained by WhatsApp are governed by those services. Do not send private chat databases, QR codes, login tokens or encryption keys to obtain support.
For privacy or licensing-data deletion questions, email [email protected]. Production retention periods and the final deletion process still require operator confirmation. See support. This notice does not promise a deletion workflow or retention period that has not been implemented and verified.