Privacy Policy

This Privacy Policy applies when you visit the Orbi website or affiliate portal, download or use the desktop app, create an account or affiliate account, view strategy or trading information, contact support, purchase a plan, share a referral link, or enable a connected feature.

Orbi is operated under the AnySynth name. The operator of Orbi is the controller responsible for the personal data described here. AnySynth is an operating name and is not presented as a registered corporation merely by use of that name. You can contact the controller at [email protected].

Account and authentication information

When an account is created, we process your display name, email address, internal user ID, Firebase user ID, account role, subscription tier, account dates, and session records. Firebase Authentication processes passwords and provider credentials for customer accounts; Orbi does not store or receive a readable password from the website. Limited legacy operator accounts may use a one-way password hash stored by the Orbi API. We also process hashed refresh-session identifiers, expiration, revocation, and last-used information.

Affiliate and attribution information

If you apply to the affiliate program, we process your name, email address, traffic source, approval status, referral code, payout preference and details, commission and payout records, and identity or tax information where required. To attribute referrals, we may process referral parameters, clicks, landing pages, timestamps, device or network data, pseudonymous identifiers, resulting subscriptions, plan and transaction values, and the validation, refund, chargeback, or fraud status of commission events.

Trading and strategy information

To display and operate the service, we may process bot names and status, node graphs, graph sharing codes, selected wallets, signal sources, execution mode, equity, profit and loss, win rate, drawdown, trade count, market date, symbols, direction, quantity, requested and execution prices, timestamps, trade intent or reason, stop-loss and take-profit values, position quantity and average cost, candle data, and configuration or control events.

This information may relate to a connected or simulated trading environment. Do not connect an account or submit data that you are not authorized to use.

Connected notification services

If you connect Discord or Telegram notifications, we process the linked service account or server identifier, display name, available channel identifiers and names, selected delivery channel, bot-graph notification settings, delivery status, and limited error records. OAuth access tokens used to verify a Discord installation are not retained. Server-side bot credentials are controlled by Orbi and are not stored in user graphs.

Device, network, and service data

We may receive IP address, request timestamps, app version, operating system or device type, user-agent information, update status, error and diagnostic information, security events, and records of API requests. We use this data to deliver the service, prevent abuse, investigate failures, and protect accounts.

Billing, contact, and support data

If you purchase access, we may process your plan, billing interval, payment method, payment status, order or transaction identifier, amount, currency, billing contact, tax information where required, and limited payment details returned by Stripe or NOWPayments. Stripe hosts card checkout and processes payment-card details; Orbi does not intend to store full payment-card numbers. NOWPayments processes cryptocurrency checkout and may return payment addresses, asset and network choices, payment amounts, status, and public blockchain transaction identifiers. Public blockchain records are not controlled or erasable by Orbi. If you contact us, we process your email address, message, attachments, and support history.

Public website data

If you join the prerelease list, we store your email address, signup time, launch campaign, and the associated discount entitlement so we can recognize your eligibility and deliver or apply the launch offer. Submitting the form does not create a trading account or enroll you in unrelated marketing.

The public site currently does not use third-party advertising cookies or behavioral advertising trackers. First-party referral parameters or storage may be used to attribute an Orbi purchase to an affiliate. Like most hosted sites, infrastructure providers may still create short-lived security, load-balancing, or request logs containing technical data such as IP address and browser information.

In production desktop builds, the refresh token used to restore your signed-in session is stored in your operating system’s credential vault. Short-lived access tokens are held in app memory. Your automatic-update preference is stored locally on the device. Removing the app may not automatically remove every operating-system credential or downloaded file; you can sign out before uninstalling and use your operating system’s controls where needed.

The affiliate portal may use essential browser storage or cookies to maintain a signed-in session, preserve interface settings, prevent fraud, and remember first-party referral attribution. Clearing browser storage may sign you out or remove attribution before a purchase is completed.

• create, authenticate, secure, and administer accounts;
• provide bot graphs, dashboards, Aegis research, signals, analytics, controls, and app updates;
• process subscriptions, access entitlements, cancellations, and support requests;
• record prerelease requests and deliver or apply the launch discount users requested;
• review affiliate applications, attribute referrals, calculate and validate commission, prevent affiliate abuse, and process eligible payouts;
• detect fraud, abuse, unauthorized access, outages, and software defects;
• maintain, analyze, debug, and improve service reliability and product design;
• communicate essential account, security, billing, and policy notices;
• comply with law, enforce our Terms, and establish or defend legal claims; and
• create aggregated or de-identified statistics that do not reasonably identify you.

We do not sell personal data. We do not use account or trading data for third-party targeted advertising, and we do not share it for cross-context behavioral advertising as those terms are commonly defined.

Where data-protection law requires a legal basis, we rely on:

• Contract: to create your account, provide paid or invited access, show trading information, and deliver requested features.
• Legitimate interests: to secure Orbi, prevent fraud, understand reliability, improve the service, and communicate with existing users, balanced against your rights.
• Legal obligations: to keep records, respond to lawful requests, and meet tax, accounting, consumer, and compliance duties.
• Consent: where you make an optional choice that legally requires consent. You may withdraw consent prospectively at any time.

We may disclose relevant information to:

• infrastructure, hosting, database, security, update-delivery, email, support, payment, affiliate-attribution, identity-verification, and payout vendors working for us under appropriate restrictions;
• brokers, exchanges, blockchain networks, market-data providers, or other services when you enable an integration or instruct us to communicate with it;
• professional advisers such as lawyers, accountants, auditors, and insurers;
• authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or respond to valid legal process; and
• a buyer, investor, or successor in connection with a proposed or completed financing, reorganization, sale, or transfer, subject to appropriate confidentiality and notice where required.

Connected platforms are independent controllers for data they process under their own policies. Review their terms before enabling an integration.

We keep personal data only as long as reasonably necessary for the purposes above. Account records are generally retained while the account is active and for a limited period after closure for security, dispute, tax, backup, and legal needs. Active refresh-session records are designed to expire after up to 30 days unless rotated or revoked earlier.

Trading history and analytics may be retained while needed to provide historical dashboards, investigate system behavior, honor your plan, and meet recordkeeping needs. Support, transaction, and compliance records may be kept for the applicable limitation or statutory period. Backups are deleted or overwritten on a rolling schedule. Aggregated or genuinely de-identified data may be kept longer.

Affiliate click and attribution records are kept long enough to apply the referral window, validate commission, investigate abuse, and resolve disputes. Affiliate payment, tax, and commission records may be retained for the applicable accounting, tax, and legal period.

Prerelease signup records are retained through launch and for a reasonable period afterward to verify and apply the requested discount, prevent duplicate use, resolve support issues, and meet applicable recordkeeping obligations. You may ask us to delete your prerelease record before redemption, subject to any legal exception.

Orbi and its vendors may process information in countries other than your own. Where required, we use recognized transfer safeguards, contractual protections, or another lawful transfer mechanism. Local law in a receiving country may differ from the law where you live.

We use measures designed to protect information, including encrypted HTTPS connections in production, one-way password hashing, hashed server-side refresh tokens, short-lived access tokens, session revocation, role-based controls, rate limits, restricted database files, and operating-system credential storage for the desktop session token.

No system is completely secure. You are responsible for securing your device, email account, password, connected accounts, and recovery methods. Notify us promptly if you believe your Orbi account has been compromised.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data; withdraw consent; and appeal or complain about a privacy decision. You may also have the right not to be discriminated against for exercising a privacy right.

Send a request to [email protected] from the account email and describe the right you want to exercise. We may verify your identity and authority before acting. We will respond within the period required by applicable law. Some information may be retained where an exception or legal obligation applies.

Users in the European Economic Area, United Kingdom, or Switzerland may complain to their local data-protection authority. You may object to processing based on legitimate interests and withdraw consent without affecting processing already lawfully completed.

User-created Orbi bot graphs may automate market analysis or trading instructions based on market data, selected nodes, links, and settings. The resulting signals, risk labels, forecasts, and instructions are educational and informational software outputs, not individualized advice or guaranteed outcomes. Those financial actions can have significant consequences, which is why you must understand the risks and retain appropriate controls. Processing your settings or performance data does not mean we have assessed whether a trade or strategy is suitable for you. We do not currently use your personal data to make solely automated decisions about you that produce legal or similarly significant personal effects, such as employment, credit, or insurance eligibility.

Orbi is not directed to children and is available only to people aged 18 or older. We do not knowingly collect personal data from children. Contact us if you believe a child provided information so we can investigate and delete it where appropriate.

We may update this policy when the product, vendors, or law changes. We will post the revised policy with a new “Last updated” date and provide additional notice for material changes where required.

Privacy questions and rights requests may be sent to [email protected]. Include “Privacy request” in the subject line and do not include passwords, private keys, or broker credentials.