OrbSide (“OrbSide”, “we”, “us”) is a browser extension provided by Framworq that acts as an AI writing assistant inside WhatsApp Web. This policy explains what data OrbSide handles and how.
Our core principle: your data stays with you. We do not run servers that receive, store, or process your conversations, and we never sell or share your data.
What we handle
- Account email. When you sign in, we store your email address and a login session to authenticate you and sync your settings. Sign-in uses a one-time code — no password.
- Your settings. Non-sensitive preferences (model, tone, language, quick actions, knowledge-base notes, and the links/labels of any Google Sheets you connect) are synced to your account so they follow you across devices.
- Your plan & usage. On a managed plan (free trial or paid), we record how much AI usage you consume — a running total of token cost — so we can enforce your plan's limit and bill you. We store this usage total and your plan/subscription status; we do not store the contents of your messages.
- Your OpenAI API key (optional, BYOK). If you choose “bring your own key” mode, your OpenAI key is stored only on your device, is never synced to your account, and is never sent to us. Managed plans do not require a key.
- Conversation content. When you take an action, OrbSide reads the WhatsApp conversation you currently have open to draft a reply, answer a question, or translate. On a managed plan, this text is sent from your browser through OrbSide's secure proxy to OpenAI (using our key) to generate the response, and the token usage is metered for billing — the message text itself is not stored. In bring-your-own-key mode, the text is sent directly from your browser to OpenAI using your own key, without passing through us. In neither case are your conversations stored on our servers.
- Knowledge base. If you add notes or link a Google Sheet, that content is fetched in your browser and sent to OpenAI (with your key) to be indexed and used to ground replies. Indexed data is cached locally on your device; only the sheet’s link and label are synced.
Third-party services
- OpenAI processes the text you send to generate replies, under OpenAI’s policies — on a managed plan via our account, or on your own account in bring-your-own-key mode.
- Supabase provides authentication, settings sync, and the secure proxy that forwards managed-plan requests to OpenAI and records usage.
- Stripe processes payments for paid plans. We do not receive or store your card details; Stripe handles them under its own terms.
- Google Sheets & Google Docs are accessed only to fetch the sheets or documents you choose to link, using their sharing settings.
We are not responsible for third-party services, which operate under their own terms.
What we do not do
- We do not sell or transfer your data to third parties, except processing you request (e.g. sending your text to OpenAI to generate a reply).
- We do not use your data for advertising, creditworthiness, or any purpose unrelated to OrbSide’s function.
- We do not track your browsing history or monitor your activity. OrbSide reads only the chat you have open, and only when you ask.
- OrbSide never sends messages on your behalf.
Data retention & control
Your settings remain in your account until you delete them. Signing out wipes OrbSide’s data from your device (including your API key and session). You can remove linked sheets and clear your knowledge base at any time from the extension.
Children
OrbSide is not directed to children under 13.
Changes
We may update this policy; material changes will be reflected here with a new “last updated” date.
Contact
Questions about this policy? Contact Framworq at framworq.com.