OrbySystems

Privacy

Privacy policy

Last updated 9 November 2026

OrbySystems is built so your financial records stay on your own computer. This policy covers the OrbySystems app, this website and the service behind accounts and licenses. It says what we receive, why, how long we keep it, and what you can do about it. OrbySystems is a trade name of EdgeXR, Inc.

Your financial data stays on your computer

Your statements, the records OrbySystems reads from them and your conversations with its AI are stored on your computer, not with us. We don’t receive them, and free use needs no account.

The AI runs on your computer unless you choose otherwise. You can enable features that reach the internet: a cloud AI model you connect, web search, a home-value lookup, or a connection to another service. Each sends what it needs to the provider you chose, under that provider’s terms. Updates, licensing and the reporting choices below also make internet connections. The app shows which features can reach the internet.

What the app sends, and when

You can inspect the reporting field lists and allowed feature names. There is no field for your statements, financial values, or conversations.

  • Update checks. Unless you turn automatic checks off, the app asks GitHub, where our releases are published, whether a newer version exists. Downloads still come from GitHub. If basic reporting is on, a separate request to our service counts the update check, download start or completion, or a request to upgrade a license. Our server can derive approximate country from the connection, without the app reading or sending your location.
  • Requests you send. If OrbySystems can’t read a statement and you send it to us from the app, we receive a scrambled copy: its layout is kept and its values are replaced. With it come the institution name you type, any comments, your app version and operating system, and reports of how our fix worked that contain no text, dates, account details or amounts from your statement. A request about a bank we can’t download from works the same way, with the scrubbed copy of the page you reviewed. A closed request is deleted 90 days after its last change, and withdrawing one deletes it at once.
  • Licenses. If you buy Plus and activate a computer, the app checks in with our license service while you’re online, about once a day. It sends an identifier for that installation and a cryptographic signature, never your financial data.
  • Registering from the app. When you choose Upgrade License, the app sends its installation identifier to get you a sign-up link. Once you register, we record that installation against your account, so a license you buy can reach it.
  • Basic reliability reporting. On after you see and continue past the reporting notice, unless you turn it off in Settings → Privacy. It sends aggregate counts of built-in parser and recipe use and predefined errors, system errors, app version and operating system. It has no persistent installation identifier, account identifier, financial values, document names, custom feature names or error text. Counters are sent monthly while the app is running and online, and when you initiate an upgrade check or upgrade. We merge them into monthly totals and keep no per-installation basic report. Turning this off deletes unsent basic counters and stops basic reporting and app connection-country counts. Already merged totals cannot be removed for an individual installation.
  • Enhanced usage and performance reports. Off unless you explicitly turn them on during setup or in Settings → Privacy. These add a random profile identifier, broad device and model details, project/file-type counts, setup progress, monthly active days, launches, answers and broad performance timing bands. They never include financial values, statement text, names, file names or chats, and are not linked to your account or license. Local setup counters exist before this choice; ongoing enhanced activity is collected only while enabled. Reports are sent monthly or when you initiate an upgrade. Turning this off stops collection locally and deletes the cloud reports, immediately or when the service can next be reached. Reports are otherwise retained for up to a year.
  • Diagnostics for a support case. Only if you choose to share them, with a code our support team gives you: your app version, operating system, chip, and where startup or a model download stopped. They aren’t tied to your account.

This website and your account

  • Interest list. If you ask for an invitation, we keep your email address and anything optional you add: your laptop, institutions and first question. We also keep a broad source label, such as a community or search campaign, to understand which links bring interested people to us. We use your submission to send your invitation and to decide which computers and statements to support first. An address that is never confirmed is deleted after 30 days, and every email has an unsubscribe link.
  • Account. You need an account only to buy or manage a license. We keep your email address, your password as a one-way hash that can’t be reversed, your authenticator and recovery codes if you set them up, your sign-in sessions, and a record of security changes such as a new password.
  • Purchases and licenses. We keep your orders, your licenses and the computers you activate. Stripe processes payments: card details go to Stripe and never reach our servers. If you save a payment method, we keep Stripe’s reference to it.
  • Email. We send sign-in links, receipts, license notices and interest-list confirmations.
  • Cookies. This site sets one cookie, to keep you signed in, and only once you sign in. There are no advertising or analytics cookies, and no third-party trackers.
  • Website measurement and experiments. We use a random, temporary token in this tab’s session storage to count visits to this site’s pages, download-link clicks, invitation clicks, form starts and saved requests. The server stores a hash of the token, a coarse source label and bounded events for up to 90 days; the token expires after 24 hours. If an A/B test is enabled, the token keeps this tab’s assigned version consistent. We can associate the first measured request with its beta track to count confirmed, qualified and invited requests. We do not use website measurement to link you to app-install analytics, collect financial data or fingerprint your device. Browser measurement is disabled for Do Not Track or Global Privacy Control, and when session storage is unavailable. Public agent-document requests are also counted in daily totals by document and coarse, unverified caller category, without storing raw user agents or IP addresses in those counters.
  • Agent-integration beta. If you apply, we keep the requested tracks and any optional workflow description or agent/platform label. Each additional track needs email confirmation. An agent-assisted application does not authorize access to your financial projects.
  • Campaign label in your browser. We remember a broad source label in this tab’s session storage so an invitation request or a purchase can retain where you heard about us as you navigate or refresh. A purchase made in that tab keeps only the label, not the pages you visited; it is not kept for Do Not Track or Global Privacy Control, and it is removed if you delete your account. This attribution does not save full campaign URLs, ad click identifiers or financial details, is not shared with advertising platforms, and is not linked to installation analytics.
  • Network data. As with any website, our servers and providers see your IP address when you visit. We use it to deliver the site and to limit abuse, such as too many requests from one address.
  • Download and update countries. Our download page can count a GitHub download-link click, and the app can count update connections when basic reporting is enabled. We store daily totals by approximate country and release, separately from app usage and customer accounts; no IP address is stored in these analytics tables. Download-link measurement respects browser Do Not Track and Global Privacy Control. A link click is not proof that a download completed, and direct GitHub links cannot be measured by our website.

Who else handles it

We don’t sell personal information or share it with advertising platforms. We share it only with the providers that run the service for us, and only for that:

  • Railway hosts this website, the service and its database.
  • Cloudflare provides our domain and network services.
  • Resend delivers our email.
  • Stripe processes payments.
  • GitHub hosts app downloads, updates and our documentation.

We may also disclose information when the law requires it.

How long we keep it

You can delete your account at any time from its Security settings. We then erase your email address, password, authenticator, sessions, invitations and interest-list entry. If you’ve bought something, we keep the order and license records that tax rules and payment disputes require, under an anonymous placeholder, with a keyed fingerprint of your address so we can match a dispute you raise later.

Requests are deleted 90 days after they close, unconfirmed interest-list addresses after 30 days, and enhanced usage reports after a year. Aggregate basic and country totals are kept for up to two years. Unlinked batch-receipt hashes, containing no report contents or installation identifier, expire after 450 days so interrupted uploads are not counted twice.

Your choices

You can ask for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing [email protected]. We answer these requests wherever you live.

Security

Everything between your computer and our service is encrypted in transit. Passwords are stored only as one-way hashes, and authenticator secrets are encrypted.

Children

OrbySystems is meant for adults. We don’t knowingly collect information from anyone under 18.

Changes

When this policy changes, we update the date at the top, and we email account holders about significant changes before they take effect.

Contact

Questions about privacy: [email protected], with “Privacy” in the subject.