Privacy Policy
OrbitForecast ("we," "us," or "our") is operated by Duke Digital Ventures LLC. This Privacy Policy explains how we collect, use, share, and protect information when you use the OrbitForecast service at app.orbitforecast.com (the "Service"). By using the Service, you agree to the practices described here.
1. Information We Collect
Account information. When you register, we collect your name, email address, and a hashed password (or OAuth credentials if you sign in via a third-party provider).
Financial data via Plaid. To connect your bank accounts, we use Plaid Technologies, Inc. Plaid facilitates a secure, read-only connection to your financial institution and provides us with transaction history, account balances, and account metadata. We never see or store your banking username or password. Your use of Plaid is also governed by Plaid's End User Privacy Policy.
Usage data. We collect standard server logs and in-app events (pages visited, features used, error reports) to operate and improve the Service.
Communications. If you contact us by email or through the app, we retain those messages to respond and improve our support.
Cookies and local storage. We use essential cookies and browser storage for authentication sessions and user preferences. We do not use third-party advertising cookies.
2. How We Use Your Information
- To provide, operate, and maintain the Service, including cash flow analysis and forecasting.
- To power AI-assisted insights. Transaction data may be sent to Anthropic's API to generate personalized financial commentary. Data sent to Anthropic is not used to train their models under our agreement.
- To send transactional emails (account verification, cash flow alerts) via Resend.
- To respond to your support requests and communications.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
We do not sell your personal or financial data to third parties. We do not use your financial data for advertising.
3. How We Share Your Information
We share your information only with the following categories of recipients, and only as necessary to operate the Service:
- Plaid — to establish and maintain your financial institution connections.
- Supabase — our database and authentication infrastructure provider, hosted in the United States.
- Anthropic — to generate AI-powered financial insights. Transaction data shared with Anthropic is processed under API terms and is not retained for model training.
- Vercel — our cloud hosting provider.
- Resend — our transactional email provider.
- Legal or regulatory authorities — when required by law, subpoena, or to protect our legal rights.
4. Data Retention
We retain your account data and linked financial data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or legitimate business necessity (e.g., fraud prevention records).
You may disconnect any financial institution at any time from within the app. Disconnecting a bank removes Plaid's authorization token; historical transaction data already imported is retained unless you request account deletion.
5. Security
We use industry-standard security measures including TLS encryption in transit, encrypted storage, and strict access controls. We never store bank credentials. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Your Choices and Rights
Depending on your location, you may have the right to access, correct, or delete your personal data, or to restrict or object to certain processing. To exercise these rights, email us at hello@orbitforecast.com. We will respond within 30 days.
You may also delete your account at any time from within the app's settings.
7. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.
8. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice. The "Effective date" at the top of this page indicates when the policy was last revised. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Duke Digital Ventures LLC
hello@orbitforecast.com