Skip to content
Orbivell
Sign in

DATA BOUNDARY

Your folders are not a Web database

Orbivell separates local indexing from optional external processing and keeps the transfer decision visible.

Stays on the PC

  • Registered folder paths and source files
  • The local index, document chunks, questions, answers, and saved knowledge cards
  • Original file names and full local paths

Sent only after approval

  • The question and selected Evidence excerpts for grounded answers
  • Selected changed excerpts for an AI-enhanced folder briefing
  • Bounded text batches for embeddings when that consent is enabled

Metadata the service may retain

  • Account, approved device, consent, request outcome, bounded usage, cost, timing, and byte-count metadata
  • A non-sensitive diagnostic ID, component, and timestamp for support
  • No document text, question, answer, evidence content, file name, or local path in server usage records

DATA BOUNDARY

Controls you keep

You can cancel a transfer preview, withdraw AI consent, revoke an approved device, sign out, and continue using local keyword search.

Information retained by the Web service

  • Account, mobile phone, protected-password, sign-in, and device-authorization records provide member verification, mobile-device pairing, and access control. The phone number is not used for product analytics. Expired sign-ins and one-time verification records are removed after the defined retention period.
  • Optional external-processing usage stores a request identifier, feature, unit counts, status, and processing time for cost and reliability. It does not store request or response content.
  • Optional Web measurement starts only after explicit consent and stores page category, language, product version, visit time, and an identifier that does not directly reveal a person. It excludes document names, paths, questions, answers, inquiry text, email, and payment instruments. Declining does not limit features.
  • Purchases store order and payment state, amount, pass period, and a payment reference, but never card number, CVC, or payment password. Contact details and inquiry text are retained securely for replies, with delivery to cs@rodix.ai tracked separately.
  • Support text and a user-reviewed diagnostic reference are used to handle cases. Operators cannot browse local source content.
  • You can export account information as JSON and delete the Web account. Account deletion and PC local-data deletion are separate actions.