Privacy Policy

Account data

Your email address and display name, collected when you create an account.

Integration tokens

When you connect a service (Gmail, Google Calendar, Strava, GitHub, Plaid, etc.), we store OAuth access and refresh tokens to read data on your behalf. These tokens are encrypted at rest. We request only the minimum permissions needed. Some of these permissions allow Orion to make changes as well as read — creating an email draft, adding or changing a calendar event, completing a task — which it does when you ask it to and during the daily morning review. Our Terms describe that in more detail.

Content we read

To generate your brief, we read data from your connected integrations: email subjects and bodies, calendar events, health metrics, financial transactions, meeting transcripts (Fireflies, Zoom), recently modified files in Google Drive, Notion pages, Slack activity, and similar. This content is processed to generate your brief and responses to your queries. Apart from the search index described below, we do not store full email or calendar data beyond what is needed to produce your brief.

Your vault

Notes, wiki entries, and content you create directly in Orion are stored in your personal vault. We access it only to generate your brief and respond to your assistant queries.

Your search index

So the assistant can answer questions about your own history — "what did I decide about the vendor contract" — we build a private search index over your vault entries, your past briefs, and your message history. Building it stores both a numerical representation of each passage and the passage text itself.

The index is yours alone: it is never pooled across users, never used to answer anyone else's question, and it is deleted along with the rest of your data when you delete your account.

Usage data

Basic product analytics: brief ratings and feature usage. We do not sell this data or use it to build advertising profiles.

How you opt in

You enter your mobile number in Settings and confirm a one-time code we text to that number. We only send further messages once that code is confirmed, which proves the number belongs to you. The whole flow, including the exact wording shown when you opt in, is on our messaging page — readable without an account.

What we send and how often

A one-time verification code when you add or change your number — you can request at most 5 in a day. If you enable it, one daily brief message. And a reply to each message you text us, up to 20 replies in a day, after which further texts go unanswered until the next day.

Message frequency: up to one brief message per day, plus a reply to each message you send us, plus up to 3 proactive texts per day if you have enabled them. A brief may arrive as up to 3 linked segments and a reply as up to 3, which your phone shows as a single message. Message and data rates may apply.

When you text us

You can text Orion a question and it answers using the same assistant the app uses — which means your message, and the parts of your brief, wiki, calendar and notes needed to answer it, are sent to Anthropic to generate the reply. If your question is outward-facing, the assistant may run a web search, in which case the search terms leave our infrastructure.

Your side of the conversation and Orion's replies are stored so it can follow a thread across messages, and are automatically deleted after 30 days.

We only reply to a number that is already verified against an account. A text from a number we cannot attribute to a verified account gets no reply, and we do not store its contents — we would otherwise be texting people who never asked to hear from us.

Proactive texts

Proactive texts are off by default and only ever sent if you turn them on. When they are on, Orion checks your calendar and your outstanding requests on a schedule to decide whether anything is worth a heads-up — for example that a meeting starts shortly. Deciding what to say uses the same AI assistant, so the relevant calendar entry or request is sent to Anthropic to write the message.

We record which items we have already texted you about, so you are not messaged twice about the same thing. Those records are kept on the same 30-day schedule as the rest of your text history. Proactive texts are sent during waking hours only and are capped at 3 a day.

How to stop

Reply STOP to any message to unsubscribe, or turn off "Text me my brief" in Settings. Reply HELP for help, or email privacy@hi-orion.com. Carriers are not liable for delayed or undelivered messages.

How we handle your mobile information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors who provide support services, such as our SMS delivery provider, is permitted solely so that we can deliver the messages you asked for. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We do not sell your phone number, and we do not use it for advertising. Your number is stored so we can send the messages you enabled, and it is deleted with the rest of your data if you delete your account.