Orbital AI, Inc. (“Orbital,” “we,” “us,” or “our”) provides an AI-powered workspace for investment research. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies when you visit orbitalaip.com, use the application at app.orbitalaip.com, join our waitlist, or otherwise interact with our services (together, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

1. Information we collect

We collect information in three ways: information you provide, information we collect automatically, and information we receive from third parties.

Information you provide

  • Account information. When you create an account or join the waitlist, we collect your name, email address, password (stored in hashed form), and any profile details you choose to add.
  • Billing information. When you subscribe to a paid plan, our payment processor collects and processes your payment details. We do not store full payment card numbers on our systems; we retain limited billing records such as plan, transaction history, and the last four digits of your card.
  • Research content. The material you create in or submit to the Service — including watchlists, workflows, agent configurations, prompts, instructions, connected data sources, uploaded files, and the outputs generated from them (collectively, “Content”).
  • Communications. Information you provide when you contact us for support, respond to surveys, or otherwise correspond with us.

Information we collect automatically

  • Usage data. How you interact with the Service, such as features used, workflows run, pages viewed, and timestamps.
  • Device and log data. IP address, browser type, device identifiers, operating system, referring URLs, and diagnostic or crash data.
  • Cookies and similar technologies. As described in Cookies and tracking technologies below.

Information from third parties

  • Authentication providers. If you sign in through a third-party identity or single sign-on provider, we receive basic profile information such as your name and email address.
  • Payment processor. Confirmation of payment status and limited transaction details.
  • Market and reference data providers. Financial and market data that powers the Service. This data concerns securities, markets, and public filings — not you personally.

2. How we use information

We use the information we collect to:

  • Provide, operate, maintain, and improve the Service;
  • Create and manage your account and authenticate you;
  • Process transactions, manage subscriptions and credits, and send related billing communications;
  • Run the workflows, agents, and analyses you configure, including sending your Content to AI model providers as described below;
  • Personalize your experience and remember your preferences;
  • Monitor, detect, and prevent fraud, abuse, security incidents, and other harmful activity;
  • Respond to your requests and provide customer support;
  • Understand how the Service is used so we can improve it and develop new features;
  • Send you administrative messages and, where permitted, product updates and marketing (you can opt out of marketing at any time); and
  • Comply with legal obligations and enforce our agreements.

3. AI and automated processing

The Service uses large language models and other AI systems, some operated by third-party providers, to generate research outputs. To do this, your Content — such as prompts, instructions, and the data your workflows fetch — may be transmitted to and processed by those providers to return a result.

We do not sell your Content, and we work to ensure that our AI providers process your Content only to deliver the Service and do not use it to train their models. The specific handling and retention terms depend on each provider; a current list of the providers we use is available on request.

Outputs are generated by automated systems and may be inaccurate or incomplete. They are provided for informational and research purposes only and are not investment advice. You are responsible for reviewing and verifying outputs before relying on them.

4. How we share information

We do not sell your personal information. We share information only in the following circumstances:

  • Service providers and subprocessors. With vendors who perform services on our behalf — such as cloud hosting, payment processing, AI model inference, market-data delivery, analytics, and email delivery — under contracts that require them to protect your information and use it only for the services they provide to us.
  • Professional advisors. With lawyers, accountants, auditors, and insurers as needed.
  • Legal and safety. When we believe disclosure is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our terms; or to protect the rights, property, or safety of Orbital, our users, or others.
  • Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
  • With your consent. When you direct us to share information, including with integrations you connect to the Service.

5. Cookies and tracking technologies

We and our providers use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand usage. Some cookies are strictly necessary for the Service to function; others help us measure and improve it. You can control cookies through your browser settings, though disabling some may affect how the Service works. We do not use cookies to serve you targeted third-party advertising.

6. Data retention

We retain your information for as long as your account is active and as needed to provide the Service. Because the Service is designed to keep an auditable record of how research was produced, workflow run history and provenance records may be retained for the period you configure or as required for compliance. We also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

7. Data security

We use administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for activity that occurs under your account.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, update, delete, or receive a copy of your personal information; to restrict or object to certain processing; and to withdraw consent. To exercise these rights, contact us at hello@orbitalaip.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

EEA and UK residents

If you are in the European Economic Area or the United Kingdom, we process your personal data on the legal bases of performing our contract with you, our legitimate interests in operating and improving the Service, your consent (where applicable), and compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority.

California residents

Under the California Consumer Privacy Act, as amended, California residents have the right to know what personal information we collect and how we use and disclose it, to request access to and deletion of that information, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law. You may exercise these rights using the contact details below.

9. International data transfers

We are based in the United States and may process and store information in the United States and other countries where we or our providers operate. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards, such as standard contractual clauses, for cross-border transfers.

The Service may link to or integrate with third-party websites and services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies.

11. Children’s privacy

The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice as required by law. Your continued use of the Service after an update means you accept the revised Policy.

13. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at hello@orbitalaip.com.

Orbital AI, Inc.