Privacy Policy

Last updated: January 29, 2026

1. Introduction

OrbitalMCP ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect information that you provide directly to us:

  • Account Information: Email address, name, and organization name when you create an account.
  • Content Data: Documents, text, and metadata you submit to our API for indexing and retrieval.
  • Usage Data: API calls, query patterns, and service usage metrics.
  • Payment Information: Billing details processed securely through Stripe.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices and support messages
  • Respond to your comments and questions
  • Monitor and analyze usage trends

4. Data Storage and Security

Your data is stored securely in our PostgreSQL database with the following protections:

  • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
  • Isolation: Each organization's data is strictly isolated using database-level tenant separation.
  • Access Control: API keys with granular read/write permissions.
  • Backups: Regular automated backups with point-in-time recovery.

5. No AI Training on Your Data

We do not use your content data to train AI models. Your documents, embeddings, and queries are used solely to provide the service you requested. Your data remains yours.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time by contacting us or using the API to delete your documents. Upon account deletion, all associated data is permanently removed within 30 days.

7. Third-Party Services

We use the following third-party services:

  • OpenRouter: For generating text embeddings (your content is processed but not stored by OpenRouter)
  • Stripe: For payment processing (we do not store credit card numbers)

8. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a machine-readable format
  • Withdraw consent where applicable

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@orbitalmcp.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.