Orion ("we," "us," or "our") operates the Orion web application at orion.arnabsamanta.in and related services. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Information we collect
Account information
When you sign in with Google, we receive your name, email address, profile picture, and email verification status. We store this in our database to create and manage your Orion account.
Connected Google services
If you connect Gmail and Google Calendar, Orion accesses mail and calendar data through Google's APIs on your behalf. This includes message metadata and content (subject, sender, body), calendar events, and OAuth tokens needed to keep your accounts in sync. Tokens are encrypted at rest using our integration layer.
Usage and AI interactions
When you use Orion Intelligence (our AI assistant), we process the prompts you send and relevant context (such as email or calendar content you ask about) through third-party AI providers (e.g. OpenAI) to generate responses. Chat messages may be stored in our database associated with your account.
Technical data
We automatically collect standard server logs, including IP address, browser type, request timestamps, and error diagnostics. We use cookies for authentication and CSRF protection.
2. How we use your information
We use collected information to:
- Provide, operate, and improve Orion's email, calendar, and AI features
- Authenticate you and maintain your session securely
- Sync Gmail and Calendar changes in near real time via webhooks
- Generate AI summaries, drafts, and scheduling assistance at your request
- Protect against abuse, fraud, and unauthorized access
- Comply with legal obligations
We do not sell your personal information. Orion does not send email or create calendar events on your behalf without your explicit action.
3. Third-party services
Orion relies on the following categories of third parties:
- Google — OAuth sign-in, Gmail API, Google Calendar API, and Pub/Sub push notifications
- OpenAI — AI assistant features when you submit prompts
- Hosting and database providers — application infrastructure and data storage
Each third party has its own privacy policy. We encourage you to review Google's and OpenAI's policies. Data shared with AI providers is limited to what is necessary to fulfill your request.
4. Data retention
We retain account and connection data for as long as your account is active. Chat history and cached mail metadata are retained to provide the service. You may request deletion of your account by contacting us; upon deletion, we will remove or anonymize personal data within a reasonable period, except where retention is required by law.
5. Security
We use industry-standard measures including HTTPS, httpOnly authentication cookies, CSRF protection on mutations, encrypted storage of integration credentials, and rate limiting. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.
6. Your rights and choices
Depending on your location, you may have the right to:
- Access, correct, or delete personal data we hold about you
- Revoke Google access at any time via your Google Account permissions or Orion settings
- Disconnect Gmail or Calendar from the Connections menu in Orion
- Opt out of non-essential communications (if applicable)
To exercise these rights, contact us at the address below. If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.
7. Children
Orion is not intended for users under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us so we can delete it.
8. International transfers
Your data may be processed in countries other than your own, including where our servers or service providers operate. We take steps to ensure appropriate safeguards are in place.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use of Orion after changes constitutes acceptance of the updated policy.
10. Contact
Questions about this Privacy Policy? Contact us at privacy@arnabsamanta.in.