Who we are
Orbit Financial Technology Ltd (“Orbit”, “we”, “us”, or “our”) provides an AI investment research platform, together with related APIs, data feeds, and connectors, to institutional and professional clients. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights available to you.
This policy covers our website at https://www.orbitfin.ai, the Orbit Insight platform, our APIs and data feeds, and the Orbit MCP (Model Context Protocol) connector. It does not change the terms of any separate agreement between Orbit and a client organization. Where a negotiated master agreement or Data Processing Addendum applies, that agreement governs in the event of a conflict.
Orbit is the data controller for the personal data described in this policy, except where we act as a processor on behalf of a client organization, as described in the section on client data below.
Who we are and how to contact us
Orbit Financial Technology Ltd is a company registered in England and Wales (company number 09849578), with its registered office at 6th Floor, 75 King William Street, London EC4N 7BE, United Kingdom.
For any privacy-related questions, or to exercise your rights, contact us at info@orbitfin.ai.
The personal data we collect
We collect and process the following categories of personal data.
Account and identity data. When you register for or are provisioned access to the Orbit Insight platform, our APIs, or the MCP connector, we collect your name, business email address, employer or organization, job role, and authentication credentials.
Usage data. When you use the platform, API, or connector, we collect records of your activity, including the queries you run, the tools and features you use, session timestamps, and the volume of data retrieved. For credit-based accounts, we record consumption against your account.
Technical data. We collect IP address, browser type and version, device information, and similar diagnostic data needed to operate and secure the service.
Communications data. When you contact us, subscribe to updates, request a demo, or leave a comment on our website, we collect the information you provide, such as your name, email address, and the content of your message.
Marketing and preference data. We record your preferences for receiving communications from us.
We do not intentionally collect special category personal data (such as data revealing health, race, political opinions, or religious beliefs) through the platform, and the service is not designed to process it.
The content and research data on our platform
The Orbit Insight platform is built on a large corpus of company disclosures and market documents, including public filings, earnings call transcripts, regulatory disclosures, ESG reports, and news. This material relates to companies and markets. Where it incidentally contains the names or statements of individuals acting in a professional capacity, such as company executives or analysts named in a public filing or transcript, we process that information as part of providing investment research on a lawful basis of legitimate interest, and only from sources that are already public or that we are authorized to use.
Client data and our role as a processor
Where a client organization uploads its own data into the Orbit environment, or where we process personal data on a client’s documented instructions, Orbit acts as a data processor and the client is the data controller. In those cases, we process client data only to provide the service, in accordance with the applicable client agreement and Data Processing Addendum, and not for our own purposes.
We do not use client data or client queries to train third-party foundation models.
The Orbit MCP connector
The Orbit MCP connector allows you to access Orbit’s investment research tools from a compatible AI client, such as Claude. This section explains how the connector handles data.
Authentication. The connector authenticates using OAuth 2.0 with PKCE. When you connect, you are redirected to Orbit’s authorization server to sign in with your Orbit credentials. The AI client receives a limited access token, not your password. You can revoke that access at any time from your Orbit account.
What the connector accesses. The connector provides read only access to Orbit’s research data through a defined set of tools. It retrieves company filings, transcripts, disclosures, stock prices, and news sentiment scoped to your Orbit subscription. The connector cannot create, modify, or delete data in your Orbit account, and it does not access your email, files, calendar, or any personal account outside Orbit.
What data passes through. When you make a request through the connector, the query text you send and the identifiers required to fulfill it are transmitted to Orbit’s servers to return a result. We process these requests to operate the service and to secure and monitor it. We do not use the content of connector queries to build advertising profiles, and we do not sell it.
Your AI client. The AI client you use to reach the connector, such as Claude, is operated by a third party under its own privacy policy. Orbit is not responsible for how that third party handles your data before it reaches Orbit or after Orbit returns a result. Please review the privacy policy of your AI client.
How we use personal data
We use personal data to provide, operate, secure, and improve the Orbit platform, APIs, and connector; to authenticate users and manage accounts; to meter and bill usage; to respond to your enquiries and provide support; to send you service and, where you have chosen to receive them, marketing communications; to detect, prevent, and investigate fraud, abuse, and security incidents; and to comply with our legal and regulatory obligations.
Our lawful bases
Where the UK GDPR and EU GDPR apply, we rely on the following lawful bases. We process account, usage, and technical data to perform our contract with you or your organization. We process data for security, fraud prevention, service improvement, and business-to-business marketing on the basis of our legitimate interests, balanced against your rights. We process data with your consent, such as for certain cookies and marketing, which you may withdraw at any time. And we process data where necessary to comply with a legal obligation.
Security
We use technical and organizational measures to protect personal data, including encryption of data in transit using current TLS standards, access controls, and monitoring. Connections to the API and MCP connector are authenticated and encrypted.
Your rights
Depending on your location and applicable law, you may have the right to access the personal data we hold about you; to have it corrected or erased; to restrict or object to its processing; to data portability; and to withdraw consent where processing is based on consent. Where we act as a processor for a client organization, we will refer your request to that organization and support them in responding. To exercise your rights, contact info@orbitfin.ai.
Cookies
Our website uses cookies and similar technologies. Some are necessary for the site to function, such as a temporary cookie that checks whether your browser accepts cookies, and login cookies that keep you signed in. Others help us understand how the site is used or remember your preferences, such as a cookie that prevents a pop-up from showing repeatedly.
You can control cookies through your browser settings. If you disable some cookies, parts of the site may not work properly.
Marketing communications
If you subscribe to updates or submit a form, we use your details to send you related content and offers. You can unsubscribe at any time using the link in any marketing email, or by contacting us.
Third party websites
Our website and content may link to third party websites and services that we do not operate. We are not responsible for their privacy practices. Please review their policies before providing personal data.
Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and change the “last updated” date above. Where changes are significant, we will provide additional notice where required by law.