Overview
Orbit Social Studio LTD ("Orbit", "we", "us" or "our") is the controller of the personal information described in this policy unless we expressly state otherwise. We are based in the United Kingdom and operate Orbit, a workspace for planning, publishing, analysing and managing social-media activity.
This policy applies to Orbit's desktop application, hosted services and legal pages. It does not replace the privacy policies of Facebook, Instagram, TikTok, X or other services you choose to connect.
Information we collect
Account and workspace
Name, email address, role, workspace membership, team settings and authentication information.
Connected account data
Social profile or Page identifiers, display names, granted permissions and account connection status.
Content and conversations
Drafts, scheduled and published posts, uploaded media, comments, mentions and messages where you authorise access.
Performance information
Reach, impressions, reactions, clicks, viewing metrics, audience insights and advertising results made available by a connected platform.
Team activity
Approvals, ideas, channel messages, meeting details and an audit history of important workspace actions.
Technical and support data
Device and application information, diagnostic logs, security events and information included in support requests.
Facebook and Instagram data
If you connect a Meta account, Orbit requests only the permissions shown during Meta's authorisation flow. Depending on the features you enable, this may allow Orbit to list eligible Facebook Pages or Instagram professional accounts, publish content you create, read engagement and insights, and support authorised inbox functions.
Orbit does not sell Meta Platform Data. We do not use it to build advertising profiles for unrelated third parties. Access tokens are treated as confidential credentials and are stored using appropriate security controls.
How we use information
- Provide, secure and maintain your Orbit account and workspace.
- Connect the social-media profiles that you choose to authorise.
- Create, schedule and publish content at your direction.
- Show authorised analytics, comments, messages and account status information.
- Support team access, approvals, collaboration and activity records.
- Prevent misuse, diagnose faults and improve reliability and accessibility.
- Respond to enquiries and comply with applicable legal obligations.
Legal bases
Under UK data-protection law, we rely on one or more of the following:
- Contract — processing needed to provide the Orbit service you request.
- Legitimate interests — operating, securing and improving Orbit while respecting your rights.
- Consent — where you choose to connect an account or enable an optional integration and consent is the appropriate basis.
- Legal obligation — processing needed to comply with applicable law.
Retention and deletion
We keep information only for as long as needed for the purposes described above. Connected-account credentials are retained while the connection remains active and are removed or invalidated when you disconnect it, revoke access through the platform, or request account deletion, subject to technical backup cycles and legal requirements.
Workspace content and analytics are generally retained while your account is active. Routine diagnostic logs may be kept for up to 90 days unless a longer period is required for security investigation. Records needed for tax, dispute or legal purposes may be retained for up to six years or another period required by law.
You stay in control.
Disconnect a social account in Orbit or submit a verified deletion request. We aim to complete valid requests within 30 days unless the law permits additional time.
Your UK privacy rights
Depending on the circumstances, you may have the right to:
- Access personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion or restriction of processing.
- Object to processing based on legitimate interests.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on consent.
You may also complain to the UK Information Commissioner's Office. We encourage you to contact us first so we can try to resolve your concern.
Security and international transfers
We use proportionate technical and organisational measures designed to protect personal information, including access controls, encryption or operating-system credential protection where appropriate, workspace separation and activity records. No system can guarantee absolute security.
Some connected platforms and service providers may process information outside the United Kingdom. Where required, we use recognised safeguards for international transfers, such as adequacy regulations or approved contractual protections.
Contact us
Questions, privacy requests and concerns can be sent to Orbit Social Studio LTD. We may need to verify your identity and authority over the relevant account before fulfilling a request.
Privacy contactTyler@orbitsocials.infoUnited Kingdom→Children and policy updates
Orbit is a business service and is not directed to children. We may update this policy when our service, legal obligations or data practices change. Material changes will be highlighted through an appropriate notice and the effective date above will be updated.