Data Retention Policy
Last updated 1 October 2026
This Data Retention Policy explains how long OrbitSub, a sole proprietorship owned and operated by Karan in New Delhi, India, and registered as a micro enterprise under the Udyam (MSME) scheme of the Government of India ("OrbitSub", "we" or "us") keeps personal data and other information, and why. It forms part of our Privacy Policy.
1. Principles
- We keep personal data only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires.
- When that period ends, we delete the data, or anonymise it so that it can no longer be linked to you.
- Where the law requires us to keep data for a minimum period, we keep it for that period in restricted storage, use it only for the purposes the law allows, and then delete it.
2. Retention schedule
| Data | Retention period | Why |
|---|---|---|
| Account and profile information | While your Account exists | To provide the Service |
| Research, comments, messages, library sources, Orbit AI history and other Content | While your Account exists, or until you delete the item | To provide the Service |
| Session records, including IP address and browser information | Until the session ends or expires, and no longer than 30 days of inactivity | To keep you signed in and protect your Account |
| Registration information (email address, username, name, and the dates you joined and left) after you delete your Account | 180 days after deletion, then erased automatically | Rule 3(1)(h) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 |
| Content removed or disabled for breaching our rules or the law, and related records | At least 180 days, or longer where a court, a government agency or the law requires | Rule 3(1)(g) of the same Rules, for investigation purposes |
| Records relating to a legal claim, investigation or lawful request | Until the matter is resolved and any period for appeal has passed | To establish, exercise or defend legal claims and comply with law |
| Logs of access and processing | For the periods required by law, including at least one year under the Digital Personal Data Protection Rules, 2025 once in force, and as directed by CERT-In | Security, and compliance with law |
| Subscription and payment records | For as long as tax and accounting laws require | Compliance with law |
| Support requests and grievances | For as long as needed to resolve them, and then for up to three years | To handle follow-ups and demonstrate compliance with grievance obligations |
| Error diagnostics | Up to 90 days | To find and fix problems |
| Backups | Overwritten on a rolling basis, ordinarily within 30 days | To recover from failures |
| Data held by our AI providers to prevent abuse | Up to 30 days, where their terms provide for it | Their abuse monitoring |
3. Anonymised data
We may keep information that has been anonymised, so that it can no longer identify you, such as aggregate counts of how features are used. Anonymised information is not personal data.
4. Content in shared spaces
When you contribute to research owned by someone else, the text of contributions approved by its owner becomes part of that research and remains after your Account is deleted, without a link to your Account, as described in our Terms of Service.
5. Inactive accounts
We do not currently delete Accounts because they are inactive. If we introduce a retention limit for inactive Accounts, we will update this Policy and notify affected users at least 48 hours before any deletion, as the law requires.
6. Contact
Questions about this Policy can be sent to team@orbitsub.com.
This Policy is effective from 1 October 2026.