Privacy policy

Who this covers

Social Orbis schedules and publishes social media posts on behalf of businesses. This policy covers people who use Social Orbis, and the social accounts they connect to it.

What we collect

• Your account: name, email address, and a hashed password. Email is used to sign in, to send invitations and approval links, and to tell you when a post fails.
• Connected social accounts: the access token the platform issues, the account identifier, and the display name. Tokens are encrypted at rest and are used only to publish what you schedule and to read back the statistics shown in your reports.
• The content you create: captions, images, video and schedules, plus a record of what was published and whether it succeeded.
• Operational logs: ordinary web server logs, and a record of each publish attempt and its result, kept so failures can be diagnosed.

What we do not do

We do not sell personal data, we do not share it with advertisers, and Social Orbis carries no advertising or analytics trackers. Data from a connected social account is used only to provide the features you asked for.

Cookies, and what is kept in your browser

Social Orbis sets one cookie, which keeps you signed in, and a second short-lived one for the ten minutes a “continue with Google” sign-in takes. Both are strictly necessary to log in, so neither asks for consent — without them the service cannot work at all. There are no advertising, analytics or tracking cookies of any kind. Your chosen theme and colour scheme are remembered in your browser’s own storage and are never sent to us.

Where it is held

Data is stored on servers we operate, and uploaded images and video are held on the application server’s own disk rather than a public bucket. Files are served only through short-lived signed links, so a media URL cannot be shared onwards and keep working indefinitely.

Who else sees it

The social platforms you connect — Meta and others — receive the posts you schedule to them, and are governed by their own policies. Email is delivered by our mail provider. Everyone else in your company workspace can see that workspace’s content, according to the role they were given.

Removing your data

You can disconnect a social account at any time, which deletes the token and identifier we hold for it along with anything still queued to send through it. Removing Social Orbis from your Instagram or Facebook settings has the same effect — the platform tells us, and we delete our copy. Full instructions, and how to check a deletion request, are on the data deletion page.

Contact

Questions about this policy, or a request about your data: privacy@socialorbis.app. The terms the service is provided on are in our terms of service.