Privacy Policy

This Privacy Policy explains what information Orin (“Orin,” “we,” “us,” or “our”) collects when you use the website and application at orin.finance (the “Service”), how we use and share it, and the choices you have. Orin is a stock-research application for individual investors; this policy covers the personal information we handle to run that Service.

We do not sell your personal information, we do not run advertising trackers, and we do not buy marketing lists. We collect only what we need to run the research product.

1. Information you give us

Account information. Your email address and, if provided, your name. If you sign in with Google, we receive basic profile information (such as your email and name) from Google through our identity provider, Amazon Cognito. We never receive your Google password.
Watchlist and research activity. The tickers you follow, screens you save, and questions you ask the research assistant, so we can provide the features you use.
Holdings you enter or sync. If you record holdings manually, we store what you enter. If you connect a brokerage account through Plaid, we receive read-only holdings, positions, and balances for that account (see Section 6). We never receive the ability to trade or move money.

2. Information we collect automatically

Usage information. Which research pages you view and how you interact with the Service, so we can operate, secure, and improve it.
Technical information. Standard log data such as IP address, browser type, device information, and timestamps, collected to keep the Service secure and diagnose errors.
Cookies. We use strictly functional cookies only — session authentication, CSRF (cross-site request forgery) protection, your theme preference, and onboarding state. We do not use third-party advertising cookies or cross-site tracking. See Section 7.

3. How we use your information

to create and secure your account and sign you in;
to provide the research product, including your watchlist, holdings, screens, and the research assistant;
to personalize which research you see based on the tickers and holdings you choose to give us;
to send transactional email (verification and sign-in codes, account notices) and, if you opt in, watchlist alerts and a weekly digest;
to monitor, debug, and improve the Service and prevent abuse;
to comply with law and enforce our Terms of Service.

We do not use your personal information to make personalized investment recommendations. Orin publishes general research; personalization means organizing that general research around the tickers and holdings you choose.

4. How we share information

We do not sell your personal information and we do not share it for advertising. We share information only with service providers (“subprocessors”) that help us run the Service, and only as needed for them to perform their function:

Amazon Web Services (AWS). Hosting and infrastructure, user authentication (Amazon Cognito), and transactional email delivery (Amazon SES). Processed in the United States.
Plaid. Optional brokerage-account connectivity — used only if you choose to connect a brokerage account, to retrieve read-only holdings and balances.
Google. Optional “Sign in with Google” — used only if you choose to sign in with your Google account.
AI infrastructure providers. We use third-party artificial-intelligence model APIs to help generate research and to answer your questions. Orin's standing research text is generated server-side over Orin's own corpus of source documents. When you ask the research assistant a question, your question (and relevant context) is sent to a third-party AI provider to produce the answer. We use providers under terms intended to keep your data confidential and, where available, that do not train their models on it.
Sentry. Error and performance monitoring, to detect and fix problems in the Service.

We may also disclose information if required by law or valid legal process, to protect the rights, safety, and security of Orin or others, or in connection with a merger, acquisition, or sale of assets (in which case we will continue to protect your information under this policy or notify you of any change).

5. What we do not do

We do not sell or rent your personal information.
We do not use advertising trackers or serve third-party ads.
We do not buy marketing lists or send you unsolicited marketing on behalf of others.

6. Brokerage connections through Plaid

Connecting a brokerage account is optional. If you connect one, you use Plaid to establish a read-only link, and we receive holdings, positions, and balances for that account to personalize your research. Orin can never place trades or move money. You can disconnect a brokerage connection at any time. Plaid's handling of your information is governed by Plaid's own privacy policy and end-user terms.

7. Cookies and similar technologies

Our cookies are strictly functional. We use them to keep you signed in (session authentication), to protect requests against cross-site request forgery (CSRF), to remember your light/dark theme, and to track your onboarding state. We do not use advertising or cross-site tracking cookies. Because these cookies are essential to the Service, disabling them may prevent the Service from working.

8. Email and your choices

We send transactional email — such as verification and sign-in codes and account notices — because it is necessary to operate your account. You may separately opt in to non-essential email such as watchlist alerts and a weekly digest, and every such email includes a one-click unsubscribe. Our email is sent from addresses at the orin.finance domain via Amazon SES.

9. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your personal data within a reasonable period, except where we are required to retain certain information to comply with law, resolve disputes, or enforce our agreements. We may retain de-identified or aggregated information that can no longer reasonably identify you.

10. Your rights and choices

You can delete your account at any time from your account settings (Account → Danger zone). Deletion removes your personal data within a reasonable period, subject to the exceptions in Section 9. Depending on where you live, you may have additional rights — such as to access, correct, or export your personal information, or to object to certain processing. To exercise any of these rights, or for any question about your data, email us at contact@orin.finance. We may need to verify your identity before acting on a request.

11. Data security

We use reasonable administrative, technical, and organizational measures — including transport encryption, scoped access, and managed authentication — to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

12. International users and data location

Orin is operated from and hosts data in the United States. If you access the Service from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your country.

13. Children's privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

15. Contact

Questions about this policy or your personal information can be sent to contact@orin.finance.