Privacy Policy

Effective June 1, 2025

1. Who We Are

Orbit Funding operates a funded trading challenge platform accessible via our Telegram Mini App and website at orbit-funding.com. When you create an account, purchase a challenge, or interact with our platform, you are sharing information with us. This policy explains what we collect, how we use it, and how we protect it.

2. Information We Collect

• Account information: full name, email address, password (hashed), and referral code
• Identity documents: government-issued ID and proof of address (collected during KYC verification)
• Trading activity: order history, account balances, open positions, challenge progress, and performance data
• Payment records: transaction hashes, wallet addresses, and deposit/withdrawal history
• Device and usage data: IP address, browser type, and pages visited for security and fraud prevention
• Communication data: messages you send to our support team

3. How We Use Your Information

• To create and manage your trading account
• To process challenge purchases and payouts
• To verify your identity (KYC) before enabling withdrawals
• To send security alerts, transaction confirmations, and account notifications
• To detect and prevent fraud, abuse, and violations of our terms
• To comply with applicable anti-money laundering and sanctions regulations
• To improve the platform and user experience

4. We Do Not Sell Your Data

Orbit Funding does not sell, rent, or share your personal information with third parties for marketing purposes. Your data is used solely to operate the platform and fulfill our legal obligations.

5. Third-Party Service Providers

We work with a limited number of trusted third-party providers to operate the platform. These include email delivery services (for OTP and notifications), cloud infrastructure providers, and KYC verification partners. All providers are contractually required to protect your data and may only use it to deliver services on our behalf.

6. Data Security

• Passwords are hashed using bcrypt and never stored in plain text
• OTP codes are hashed and expire within 10 minutes
• All data is transmitted over encrypted HTTPS connections
• Access to production databases is restricted to authorized personnel only
• We conduct regular security reviews of our infrastructure

7. Data Retention

We retain your personal data for as long as your account is active and as required by applicable law, including anti-money laundering regulations. If you close your account, we may retain certain records for up to 5 years to meet legal obligations. You may contact us to request deletion of your data subject to these requirements.

8. Your Rights

• Access: you may request a copy of the personal data we hold about you
• Correction: you may request that we update inaccurate information
• Deletion: you may request deletion of your data where no legal obligation requires us to retain it
• Portability: you may request your data in a structured, machine-readable format
• Objection: you may object to certain processing activities

9. Cookies

We use essential session cookies to keep you logged in and to prevent cross-site request forgery. We do not use advertising or tracking cookies.

10. Contact

For any privacy-related questions or requests, please contact our team at support@orbit-funding.com. We will respond within 5 business days.