Version updated: 2026/3/23
Orbit Moon Alpha (“Orbit Moon Alpha,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect information when you visit or use our website and services, including our AI Agent, Kepler platform, membership features, and related web-based services (collectively, the “Services”).
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
Our website address is:
Orbit Moon Alpha provides web-based digital products and services, including AI-powered tools, multimedia creation features, and membership-based access plans.
2. Information We Collect
We may collect the following categories of information:
a. Account Information
When you register for an account or use our login features, we may collect:
- email address
- phone number
- account identifiers
- authentication-related information
- membership or access-level information
b. Transaction and Subscription Information
When you purchase a product, membership, or subscription, we may collect or receive:
- order details
- selected plan or product
- billing interval
- payment status
- transaction identifiers
- subscription status, renewal, and cancellation information
- checkout email address and related order communication details
We do not store full payment card numbers on our own servers.
c. AI Interaction and User Content
When you use our AI-powered Services, we may process and retain prompts, messages, uploaded inputs, conversation history, thread metadata, and related outputs as necessary to provide the requested functionality and support user-facing product features.
d. Technical and Usage Information
We may automatically collect certain technical and usage information, such as:
- IP address
- browser type and version
- operating system
- device information
- log data
- referring URLs
- pages visited
- timestamps and usage activity
e. Cookies and Authentication Data
We use cookies and similar technologies, including:
- JWT-based authentication cookies
- secure HttpOnly cookies
- session cookies
- other essential cookies necessary for login, authentication, session integrity, security, and website operation
f. Communications and Support Information
If you contact us directly, we may collect:
- your contact details
- support messages
- attachments
- other information you choose to provide
3. How We Use Information
We may use personal data for the following purposes:
- to create and manage user accounts
- to authenticate users and maintain secure sessions
- to provide access to our AI Agent, Kepler, and related Services
- to support user-facing product functions, including access to account-related history and continuity features
- to process purchases, memberships, and subscriptions
- to send transactional communications, including purchase confirmations and service notices
- to provide customer support
- to maintain, secure, monitor, and improve our Services
- to detect fraud, abuse, unauthorized access, or technical issues
- to comply with legal, tax, accounting, regulatory, or contractual obligations
- to enforce our Terms and related policies
We do not sell your personal data to third parties for their own marketing purposes.
4. AI Tools and Conversation Data
When you use our AI-powered tools, we may process prompts, conversation content, uploaded inputs, and related outputs as necessary to provide the requested functionality.
To support thread continuity, user account features, and cross-device access, we may securely maintain conversation history and related thread records on behalf of users so that they can retrieve, review, manage, and continue prior interactions within the Services. This functionality is intended to support the user experience, rather than to repurpose conversation content for unrelated uses.
We do not intentionally use user conversation records for model training, advertising, or unrelated marketing purposes. We also do not routinely monitor or manually review user conversation content, except where limited access is reasonably necessary for security, abuse prevention, technical troubleshooting, legal compliance, or when assistance is requested by the user.
Where product controls are available, users may delete threads or conversation records through the application interface. We will make reasonable efforts to remove associated data from active systems, subject to technical, legal, backup, security, or compliance limitations.
5. Payment Processing
Payments on our website are processed by Stripe(“Stripe”), our third-party payment service provider.
When you make a payment, Stripe may collect and process payment-related information in accordance with its own privacy policy and terms. We may receive limited payment-related information from Stripe, such as:
- payment status
- transaction ID
- subscription ID
- billing cycle information
- partial payment method details, where made available to us
- information necessary for order fulfillment, refunds, customer support, fraud prevention, and accounting
We do not store full payment card numbers or full sensitive payment credentials on our own servers.
For more information about how Stripe handles payment data, please review Stripe’s privacy policy and terms.
6. Cookies and Similar Technologies
We use cookies and similar technologies for essential website and application functions, including authentication, session management, and security.
Essential / Authentication Cookies
These may include JWT-based and secure HttpOnly cookies used to:
- keep users logged in
- authenticate user sessions
- protect account access
- support secure use of logged-in areas of the Services
Session Cookies
We may use temporary session cookies to maintain website functionality and improve user experience during active sessions.
Security-Related Technologies
We may use HTTPS, security headers, and related safeguards to help protect data transmitted between your device and our systems.
You may be able to control cookies through your browser settings, but disabling essential cookies may affect your ability to log in or use parts of the Services.
7. How We Share Information
We may share personal data with trusted third-party service providers only where reasonably necessary to operate, secure, maintain, or support our Services.
Such providers may include:
- payment processors, including Stripe
- hosting or infrastructure providers
- authentication or account management providers
- analytics or security service providers
- communication or support tools
- AI model, inference, or infrastructure providers, where necessary to deliver AI-related functionality
- legal, accounting, or other professional advisers where reasonably necessary
We do not share your personal data with third parties for their own direct marketing purposes.
We may also disclose information:
- if required by law, regulation, legal process, or governmental request
- to protect our rights, users, systems, or Services
- in connection with fraud prevention, security investigations, or dispute resolution
- in connection with a merger, acquisition, restructuring, financing, or sale of assets, subject to applicable legal requirements
8. International Data Transfers
Our Services may involve systems, personnel, or service providers located in multiple jurisdictions. As a result, your personal data may be processed or stored in countries other than your own.
Where appropriate, we take reasonable steps to ensure that personal data transferred internationally receives an appropriate level of protection consistent with applicable law.
9. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide our Services, maintain accounts, support stored thread history, comply with legal obligations, resolve disputes, and enforce our agreements.
Retention periods may vary depending on the type of data, including:
- Account information: retained while your account remains active and for a reasonable period thereafter as necessary for legal, security, or operational purposes
- Transaction and subscription records: retained as needed for tax, accounting, legal, fraud prevention, and operational purposes
- Conversation and thread data: retained while needed to provide thread history and account functionality, unless deleted by the user or removed under our retention practices
- Technical logs and security data: retained for limited periods as reasonably necessary to secure and maintain our systems
Residual copies may remain in backups, logs, or archived systems for a limited period where technically necessary or legally required.
10. Your Rights and Choices
Depending on your jurisdiction, you may have rights regarding your personal data, including the right to:
- request access to personal data we hold about you
- request correction of inaccurate data
- request deletion of personal data
- object to or request restriction of certain processing
- request a copy of certain personal data in a portable format, where applicable
To exercise your rights, please contact us at:
We may need to verify your identity before processing certain requests. We may also retain certain information where required by law, for security purposes, or for legitimate business needs.
If your account includes built-in controls for deleting threads, conversations, or account information, you may also use those product features where available.
11. GDPR and CCPA
If you are located in a jurisdiction with specific privacy rights, including the European Economic Area, the United Kingdom, or California, you may have additional rights under applicable privacy laws such as the GDPR or CCPA/CPRA.
If you maintain separate GDPR or CCPA pages, you may reference them here. Otherwise, this Privacy Policy is intended to provide a general overview of how we handle personal data across our Services.
12. Security
We implement reasonable technical and organizational measures designed to protect personal data from unauthorized access, disclosure, alteration, or destruction.
These measures may include:
- HTTPS / SSL encryption in transit
- secure authentication mechanisms
- secure HttpOnly cookies
- access controls
- server-side protections
- reasonable operational safeguards
However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
13. Age Requirements / Children’s Privacy
Our Services are primarily intended for adults and are not designed for children. You must be at least 18 years old, or the age of majority in your jurisdiction, to purchase paid products, subscriptions, or membership plans through our Services.
If you are under the age of majority in your jurisdiction, you should use the Services only where permitted by applicable law and with appropriate permission or supervision.
We do not knowingly collect personal data from children in violation of applicable law. If you believe that a child has provided us with personal data in a manner that violates applicable law, please contact us and we will take reasonable steps to investigate and address the issue.
14. Third-Party Links and Services
Our Services may contain links to third-party websites, tools, or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with personal information.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may provide notice by updating the date above or by other appropriate means.
Your continued use of the Services after any update becomes effective constitutes your acknowledgment of the revised Privacy Policy.
16. Contact Us
If you have any questions, requests, or concerns regarding this Privacy Policy or our data handling practices, please contact us at: