Privacy Policy

This Privacy Policy explains how Connect upskill Inc. (“upskill”, “we”, “us”) collects, uses, and shares personal data in connection with Orbit, our people-search and enrichment service at orbitpeople.ai.

Two kinds of personal data

Orbit processes personal data in two distinct roles:

• Account data — data about you, our customer, that we collect to provide the service. Here we act as a controller.
• Search data — data about the people you search for and enrich, which we retrieve from third-party sources and process on your behalf. Here we act as a processor for you, the customer, who determines why and how that data is used.

Account data we collect

• Account and contact details (name, email, organization) when you sign up, including via Google or GitHub sign-in.
• Billing details processed by our payment processor (we do not store full card numbers).
• Usage and device data (searches run, features used, IP address, log and diagnostic data) to operate, secure, and improve the service.

How we use account data

• To provide, maintain, and secure the service;
• To bill you and prevent fraud and abuse;
• To respond to support requests and communicate about the service;
• To analyze and improve features and reliability;
• To comply with legal obligations.

We do not sell your personal data, and we do not use it for advertising.

Data sources you connect

Orbit uses a bring-your-own-key model for people-data sources. You connect your own accounts with third-party data providers (for example Exa, People Data Labs, Hunter, or ContactOut) by supplying their API credentials in your workspace settings. When you run a search, Orbit calls those providers using your credentials, under your own agreement with each provider, and returns the results to you. Your use of each provider is governed by that provider’s own terms and privacy policy, and you are responsible for your accounts with them.

Sub-processors

To operate the service itself, Orbit relies on the following infrastructure and AI sub-processors:

• Infrastructure & operations: Convex (database and backend), Vercel (hosting), Stripe (payments), Slack (channel integration), PostHog (product analytics).
• AI processing: OpenAI, Anthropic (relevance ranking and query understanding).

This list may change as we add or remove providers; we will keep it current here.

How search data is handled

When you run a search, Orbit calls the data providers you have connected and stores the ranked results in your workspace so you can review and act on them. We process this data on your behalf, as your processor, to deliver the service. You are responsible for having a lawful basis to process the personal data you obtain and for honoring data-subject requests arising from your use, as described in our Terms of Service.

Retention and deletion

We retain account data for as long as your account is active and as needed to provide the service, then delete or anonymize it within a reasonable period unless a longer retention is required by law. You can request deletion of your account and associated data by contacting us. Search results are retained per your workspace settings.

Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing (GDPR, UK GDPR, CCPA/CPRA, and similar laws). For search data, requests about a person we process on a customer’s behalf should be directed to that customer; we will assist them as required. To exercise rights regarding your account data, contact us at hello@connectupskill.com.

International transfers

We and our sub-processors may process data in the United States and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.

Security

We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and tenant isolation. No method of transmission or storage is completely secure.

Cookies and analytics

We use cookies and similar technologies for authentication and to understand product usage. Analytics are provided by PostHog. You can control cookies through your browser settings.

Changes

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice.

Contact

Connect upskill Inc., 540 Tyler St., Eugene, OR 97402, United States. Privacy questions and requests: hello@connectupskill.com.