Privacy Policy
Orbit (https://orbit.buddhitools.com) is a tool for planning and publishing posts to social media accounts you own or manage. This policy explains what data we collect, why, and how you can have it deleted.
Data we collect
- Your account: name, email address and a securely hashed password, plus sign-in session records.
- Connected social accounts: when you connect Facebook, Instagram or YouTube, we store the account or Page ID, its name and the access tokens the platform issues. Tokens are encrypted at rest (AES-256-GCM).
- Your content: captions, titles, schedules, publishing settings, and images and videos you upload.
- Activity records: publishing results and an audit log of actions in your workspace, used for troubleshooting and security.
Data we receive from Facebook and Instagram
With your permission we receive the list of Facebook Pages you manage, their Page access tokens, and the Instagram professional accounts linked to them. When you mention another Facebook Page, we store that Page's public ID and name. We use this data only to publish and manage the posts you create in Orbit. We do not read your private messages, we do not access personal profiles, and we do not use this data for advertising or profiling.
Data we receive from Google (YouTube)
With your permission we access your YouTube channel to upload videos, set thumbnails, schedule publication and add videos to playlists you choose. Orbit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use data
- To publish, schedule and manage the posts you create.
- To show you publishing status, errors and history.
- To keep the service secure and working.
We do not sell your data and we do not show advertising.
Who we share data with
- The platforms you choose to publish to (Meta and Google): only the content and media you send to them.
- Our hosting provider, which stores the service's database and media files on our behalf.
- Authorities, when the law requires it.
Storage and security
Data is stored on our servers. Access tokens are encrypted, connections use HTTPS, and media links are signed and expire after a short time.
How long we keep data
We keep your data while your account is active. Disconnecting a social account deletes its stored tokens and its publishing history immediately. When you ask us to delete your account, we delete your data within 30 days, except where the law requires us to keep it.
Your rights and deleting your data
You can access, correct or delete your data. See Data Deletion for step-by-step instructions. You can also withdraw access at any time from your Facebook settings or your Google account permissions.
Children
Orbit is not intended for anyone under 16, and we do not knowingly collect their data.
Changes
We may update this policy. The date at the top shows the latest version.
Contact
Questions or requests: the contact address shown on https://orbit.buddhitools.com.