Privacy Policy

We collect information you provide directly, information generated by your use of the Service, and limited technical data. Specifically:

Account Information: When you register, we collect your email address, password (stored as a secure hash), and any profile details you choose to provide.

Financial Data: Transaction records, account details, ledger entries, investment records, and any other financial information you enter into the Service. This data belongs entirely to you.

Usage Data: We collect information about how you interact with the Service, such as features used, pages visited, timestamps, and error logs — solely to improve reliability and user experience.

Device and Technical Data: IP address, browser type and version, operating system, and device identifiers may be collected automatically when you access the Service.

Communications: If you contact us for support, we retain your communications to help resolve your issue.

We use the information we collect only to:

• Provide, maintain, and improve the Service;
• Process and display your financial data as directed by you;
• Authenticate your identity and keep your account secure;
• Send transactional and service-related communications (e.g., email verification, password resets, important notices about the Service);
• Investigate and prevent fraudulent, unauthorized, or illegal activity;
• Comply with legal obligations;
• Aggregate and anonymize usage data for product analytics — these aggregated datasets cannot identify individual users.

We do not use your financial data to serve you advertising, and we do not sell your personal information.

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

Service Providers: We work with carefully selected third-party vendors (e.g., cloud infrastructure, email delivery, error monitoring) who process data on our behalf under strict data processing agreements and are prohibited from using your data for any other purpose.

Legal Requirements: We may disclose information if required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the safety, rights, or property of Orchune, our users, or the public.

Business Transfers: If Orchune is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you have with respect to your information.

With Your Consent: We may share your information in other ways if you specifically request or consent to it.

We retain your account and financial data for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics purposes.

We take the security of your data seriously. We implement industry-standard security measures including: data encryption in transit (TLS/HTTPS) and at rest; hashed and salted passwords; access controls that limit who within our organization can access your data; and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk. You are responsible for keeping your login credentials confidential.

Orchune includes a built-in MCP (Model Context Protocol) server that you can connect to AI assistants such as OpenClaw and Hermes. When you use this feature, your financial queries and the responses generated are processed by the AI assistant you connect. The data sent to any AI assistant is subject to that assistant's own privacy policy. We strongly recommend reviewing the privacy practices of any AI assistant you authorize. Access tokens you generate are the sole means of authentication — keep them secret and revoke them immediately if compromised. We log MCP access events (not the content of queries) for security auditing purposes.

We use session cookies and similar technologies to authenticate users and maintain your session. We do not use third-party advertising cookies. You can configure your browser to refuse cookies, but this may affect the functionality of the Service.

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability: You can request a copy of the personal data we hold about you, and export your financial data directly from the application.

Correction: You can update or correct your account information through the application settings at any time.

Deletion: You can delete your account and associated data through the application settings or by contacting us. We will action deletion requests within 30 days.

Objection and Restriction: You have the right to object to or request restriction of certain data processing activities.

Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at support@orchune.com.

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have inadvertently collected information from a child under 16, we will delete it promptly. If you believe we have collected information from a child under 16, please contact us at support@orchune.com.

Orchune is operated from servers that may be located in various countries. If you access the Service from outside the country where our servers are located, your information may be transferred across international borders. By using the Service, you consent to such transfers. We ensure any such transfers are conducted with appropriate safeguards in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice within the Service at least 14 days before the changes take effect. We encourage you to review this Policy periodically. Your continued use of the Service after the effective date constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@orchune.com. We will respond to your inquiry within a reasonable timeframe.