Privacy Policy
Last updated: October 22, 2026
Orbit AI ("Orbit," "we," "us") provides an AI marketing agent that researches trends, drafts social media content, and publishes it on your behalf to the platforms you connect. This policy explains what information we collect, how we use it, and the choices you have. It applies to orbitai.co.in and the Orbit dashboard.
Information we collect
Account information. When you sign up, we collect your email address (via Firebase Authentication, including Google Sign-In if you use it), your business/account name, and the type of account you select.
Connected social platforms. When you connect X, Threads, LinkedIn, or Instagram, we store an encrypted access token for that platform, along with your public profile ID and username on that platform. We never see or store your password for any connected platform — authorization happens entirely through that platform's own OAuth login screen.
Content you provide and content we generate. Knowledge base entries you write (brand voice, content guidelines), draft posts, replies, Reels, and Carousels generated on your behalf, and your approval/edit/rejection history for each.
Data from connected platforms. Where relevant to the features you use, we read mentions/conversations directed at your connected X account, and performance insights (likes, comments, reach, saves, shares) for Instagram posts published through Orbit. We only access what's needed for the specific feature — see "Social platform permissions" below for exactly what each connection is used for.
Billing information. If you subscribe to a paid plan, payment is processed by Razorpay. We store the resulting order ID, payment ID, and billing currency — we never see or store your card number or other raw payment details; Razorpay handles that directly.
Usage data. Basic technical data needed to operate the service reliably and securely — request IPs (for rate limiting and abuse prevention), session cookies, and logs of automated runs (what the AI did and when).
How we use your information
- To operate Orbit: research trends, draft content in your brand voice, and publish approved content to your connected platforms.
- To show you what the AI found and drafted, so you can approve, edit, or reject it before anything goes out under your name.
- To improve future drafts based on which of your own posts actually performed well (Instagram insights only, used solely for your own account's future content — never shared with or compared against other customers).
- To process payments and manage your subscription.
- To send you operational emails — e.g. notifying you when an automated run completes, or when a new account signs up (sent only to the account owner, not to other customers).
- To secure the service — rate limiting, fraud prevention, and debugging.
Social platform permissions
When you connect a platform, you grant Orbit only the specific permissions needed for the features you use:
- Instagram (
instagram_business_basic,instagram_business_content_publish,instagram_business_manage_insights): read your basic profile, publish Reels/Carousels you've approved, and read performance insights for posts published through Orbit. - Threads (
threads_basic,threads_content_publish): read your basic profile and publish posts you've approved. - X: read mentions directed at your account and publish posts/replies you've approved.
- LinkedIn: publish posts you've approved to your own profile.
Nothing is ever published automatically to a platform without either your explicit approval, or falling under an automation tier you've chosen in Settings for low-risk content — and even then, sensitive or ambiguous content always waits for your review.
Third-party services we use
We use the following subprocessors to operate Orbit. Each only receives the data necessary to perform its function:
- Vercel — application hosting.
- Neon — database hosting (Postgres).
- Upstash — rate limiting and short-lived caching (Redis).
- Inngest — background job orchestration for automated agent runs.
- Firebase (Google) — account authentication.
- Groq — AI text generation for research, drafting, and classification.
- Google Gemini API — AI image, video, and voice generation for Reels.
- Unsplash — stock photography for Carousel slide backgrounds.
- Resend — transactional email.
- Razorpay — payment processing.
- Meta (Instagram, Threads), X, LinkedIn — the social platforms you choose to connect.
Data security
Access tokens for connected platforms are encrypted at rest (AES-256-GCM). We use industry-standard practices to protect your data, but no method of transmission or storage is 100% secure, and we can't guarantee absolute security.
Data retention and deletion
We retain your data for as long as your account is active. Disconnecting a platform in Settings immediately deletes that platform's stored access token. To request deletion of your account and all associated data, see our Data Deletion Instructions.
Children's privacy
Orbit is not directed at children under 16, and we do not knowingly collect information from them.
Changes to this policy
We may update this policy from time to time. We'll update the "Last updated" date above when we do.
Contact
Questions about this policy or your data? Email orbit11ai11@gmail.com.