ORBIT Privacy Policy

Effective date: 7 October 2026

Last updated: 9 October 2026

ORBIT is an all-in-one digital marketing and social media management platform operated by TECHFEET FZE, a company registered in the United Arab Emirates with its registered office at Sports City, United Arab Emirates ("ORBIT", "we", "us", or "our").

ORBIT enables businesses and marketing professionals to plan campaigns, create and schedule content, connect social media and advertising accounts, manage customer conversations, organise leads and opportunities, run advertising campaigns, use AI-assisted features, and review performance analytics.

This Privacy Policy explains how we collect, use, store, disclose, transfer, and protect personal data when you:

Visit the ORBIT website;
Create or use an ORBIT account;
Join or manage an ORBIT Workspace;
Connect a social media, messaging, advertising, or analytics platform;
Use ORBIT's content, AI, inbox, campaign, lead, opportunity, or analytics features;
Purchase a subscription or credits;
Contact our sales, support, or technical teams.

This Privacy Policy applies to the ORBIT website at https://orbitdm.com and the ORBIT web application at https://app.orbitdm.com, together with related services that link to this Policy (collectively, the "Service").

For privacy questions or requests, contact info@techfeet.ai.

1. Who This Policy Covers

This Privacy Policy covers:

Customers and users: Businesses, Workspace Owners, administrators, employees, contractors, and other people who create or use an ORBIT account.
People who interact with ORBIT Customers: People who message, comment on, submit a form to, or otherwise interact with a social media, messaging, or advertising account connected by an ORBIT Customer.
Leads and business contacts: Individuals whose details are added to ORBIT by a Customer or received through a connected platform.
Website visitors: People who visit the ORBIT website or submit an enquiry.
Prospective customers and support contacts: People who request a demonstration, communicate with us, or receive authorised communications from ORBIT.

2. Our Role as Controller and Processor

ORBIT acts as a data controller when we decide why and how personal data is processed for purposes such as account registration and authentication, subscription and billing administration, website operation and security, product communications, customer support, service monitoring and improvement, and compliance with legal obligations.

ORBIT generally acts as a data processor or service provider when we process, on a Customer's instructions, social media messages and comments, customer contacts and leads, opportunity and sales-pipeline data, content imported from Connected Platforms, campaign and audience information, and other personal data placed in a Customer's Workspace.

In these situations, the Customer determines the purpose of processing and is responsible for providing required privacy notices, obtaining required permissions, and responding to individuals' requests. ORBIT will assist the Customer as required by applicable law and any Data Processing Agreement.

3. Information We Collect

3.1 Account and Profile Information

When you register or use ORBIT, we may collect:

Full name;
Business email address;
Password, stored only as a strong one-way cryptographic hash;
Optional telephone number and profile photograph;
Company name, industry, and role;
Country, language, time zone, and currency;
Account status and authentication information;
Subscription Plan and account preferences.

3.2 Workspace and Team Information

We may collect:

Workspace and company name;
Workspace configuration and preferences;
Names, email addresses, and roles of invited users;
User permissions and approval settings;
Activity and audit information associated with Workspace actions.

3.3 Customer Content and Marketing Information

We process information you create, upload, import, or manage through ORBIT, including:

Campaign plans and objectives;
Posts, captions, hashtags, keywords, and content calendars;
Images, videos, documents, and other media;
Brand guidelines, colours, fonts, tone of voice, and disclaimers;
Drafts, approvals, schedules, publishing status, and revision history;
Notes, contacts, leads, opportunity stages, and follow-up activities;
Messages and replies created through ORBIT.

3.4 Information From Connected Platforms

ORBIT accesses a Connected Platform only after an authorised user signs in through that platform's official authorisation page and approves the requested permissions.

ORBIT does not receive or store your Connected Platform password.

Facebook Pages

Page name and platform ID;
Pages the user is authorised to manage;
Content publishing permissions;
Posts, comments, and Page interactions;
Page and post insights, including reach, impressions, reactions, comments, and shares;
Messenger conversations sent to the connected Page.

Instagram Professional Accounts

Account name, username, and platform ID;
Connected professional account information;
Content and media publishing permissions;
Media and account insights;
Comments, mentions, and direct messages where supported and authorised.

WhatsApp Business

Business phone-number details;
WhatsApp Business Account identifiers;
Customer messages, message status, and permitted attachments;
Templates and other information required to provide enabled messaging features.

Meta Ads

Advertising-account name, ID, currency, and time zone;
Campaigns, ad sets, advertisements, audiences, and status;
Budgets, spend, impressions, clicks, conversions, and other performance information.

Google Ads and Google Services

Connected Google account email address;
Advertising-account name, ID, currency, and time zone;
Campaign, advertisement, audience, conversion, budget, and performance data;
Google Analytics properties, traffic, event, and performance data where connected and authorised;
Other information within the Google permissions explicitly approved by the user.

Other Supported Platforms

If ORBIT adds LinkedIn, TikTok, YouTube, X, Pinterest, or another integration, we may receive account identifiers, authorised content, messages, campaign information, publishing permissions, and analytics required for the feature selected by the user.

3.5 Access Tokens and Connection Information

Connected Platforms issue access tokens that allow ORBIT to perform authorised actions without receiving the user's platform password. We store access and refresh tokens in encrypted form, use tokens only for authorised ORBIT features, restrict internal access to tokens, and remove or invalidate tokens when a connection is disconnected, access is revoked, or an account is deleted.

3.6 Information About People Who Contact Our Customers

When a person contacts a business through an account connected to ORBIT, we may receive:

Display name and profile image;
Platform user ID or telephone number;
Message, comment, enquiry, or form content;
Permitted attachments;
Date, time, delivery, and status information;
Social account or campaign source.

3.7 Subscription and Billing Information

ORBIT currently does not use a third-party payment provider and does not accept or store full payment-card details through the Service. Where a subscription, credit allocation, or invoice is administered outside the application, we may retain limited business records such as billing name and address, company and tax information, subscription Plan or credit allocation, invoice number, amount, currency, date, and payment status.

3.8 Support, Sales, and Communication Information

We may retain demonstration and sales enquiries, support requests and technical information, feedback, survey responses, product suggestions, and other communications with ORBIT.

3.9 Technical and Usage Information

We may automatically collect:

IP address;
Browser, device, and operating-system information;
Login date, time, and approximate location derived from IP address;
Pages, features, and actions requested;
Error, diagnostic, performance, and security information;
Failed-login attempts and fraud-prevention signals;
Session identifiers and local-storage information.

3.10 Website Fonts and External Resources

The ORBIT website loads fonts from Google Fonts and, as described in section 12, uses Google Analytics. When these resources load, Google may receive technical information such as your IP address, browser information, and request details.

4. Sources of Information

We obtain personal data:

Directly from you;
From your employer, Workspace Owner, or administrator;
From Connected Platforms you authorise;
From people who communicate with accounts connected by an ORBIT Customer;
From payment, authentication, hosting, security, and support providers;
Automatically through your use of the Service;
From public or business sources where lawful and relevant to an enquiry.

5. How and Why We Use Information

Purpose	Examples	Typical legal basis
Provide the Service	Create accounts, operate Workspaces, publish and schedule content, display inboxes, manage campaigns and show analytics.	Performance of a contract
Connect third-party accounts	Authenticate connections, maintain authorised access and perform user instructions.	Contract and consent
Manage leads and conversations	Display, organise, assign and respond to enquiries on a Customer's behalf.	Customer instructions and contract
Provide AI-assisted features	Generate captions, replies, hashtags, summaries and recommendations requested by the user.	Contract and user request
Administer subscriptions and billing records	Manage Plans, credits, invoices and payment status without processing full card details in ORBIT.	Contract and legal obligations
Secure the Service	Prevent abuse, investigate incidents, authenticate users and maintain audit records.	Legitimate interests and legal obligations
Support users	Respond to requests, troubleshoot problems and provide product guidance.	Contract and legitimate interests
Maintain and improve ORBIT	Diagnose errors, monitor reliability and improve user-facing functionality.	Legitimate interests
Send operational communications	Invitations, password resets, account notices, security alerts and policy updates.	Contract and legal obligations
Send optional marketing	Product news, offers and educational content where permitted.	Consent or legitimate interests
Comply with law	Maintain legally required records and respond to valid legal requests.	Legal obligations

6. AI-Assisted Features

ORBIT may provide AI-assisted features for caption and content generation, hashtag, headline, and keyword suggestions, reply drafting, content enhancement and rewriting, campaign and performance summaries, and analytics explanations and recommendations.

When a user requests an AI feature, ORBIT sends only the minimum relevant text needed to perform that specific request. Depending on the feature, this may include the user's prompt or instructions, draft content or brand guidance, the conversation being answered, or selected campaign or performance information.

AI requests are routed through OpenRouter to OpenAI. This processing takes place in the United States and may run on Microsoft Azureinfrastructure. ORBIT sends this information only when a user actively runs an AI feature; unrelated Workspace data is not included in the request.

ORBIT does not automatically publish or send an AI suggestion. A user must review and approve the output or explicitly configure a scheduled or automated action.

ORBIT does not use Customer Content to train an ORBIT general-purpose AI model. We configure and select API services intended to restrict provider training on submitted business data where available. The providers, processing locations, and applicable safeguards are described in this Policy and our ORBIT Subprocessor List.

AI output may be inaccurate, incomplete, biased, or inappropriate. Users are responsible for reviewing it before publishing, sending, or relying upon it.

7. Controller and Processor Responsibilities for Customer Data

For personal data relating to a Customer's contacts, leads, followers, or customers:

The ORBIT Customer determines why and how the information is used;
The Customer must have a lawful basis to collect, import, communicate with, and retain the information;
The Customer must provide required privacy and marketing notices;
ORBIT processes the information only to provide the Service, follow documented instructions, maintain security, and comply with law;
Individuals should normally direct requests to the relevant ORBIT Customer;
ORBIT will reasonably assist the Customer with applicable requests.

Business Customers may request an ORBIT Data Processing Agreement at info@techfeet.ai.

8. How We Share Information

We share personal data only as reasonably necessary with:

8.1 Connected Platforms

We exchange information with platforms selected and authorised by the user to publish or retrieve content, send or receive messages, create or manage campaigns, retrieve insights and performance information, and maintain the authorised connection.

8.2 Service Providers and Subprocessors

Service providers may include cloud hosting and databases, media and file storage, email delivery and hosting, AI routing and models, and security and technical-support providers. A current list of important subprocessors is maintained at https://orbitdm.com/subprocessors.

8.3 Workspace Members and Administrators

Information within a Workspace is visible to authorised members according to their assigned roles. Workspace Owners and administrators may manage user access and Customer Content.

8.4 Professional Advisers

We may share information with authorised auditors, accountants, insurers, legal advisers, and professional consultants where reasonably necessary.

8.5 Legal, Safety, and Security Reasons

We may disclose information where reasonably necessary to comply with a valid legal obligation, court order, or government request, protect ORBIT or others, or detect or investigate fraud, misuse, or unlawful activity.

8.6 Business Transfers

Information may be transferred as part of a merger, financing, acquisition, restructuring, sale of assets, or similar transaction.

9. No Sale or Targeted Advertising

ORBIT does not sell personal data, share Connected Platform data with data brokers, or use Customer messages or leads for ORBIT's own targeted advertising.

10. Data From Meta Platforms

ORBIT uses information received from Meta products, including Facebook, Instagram, WhatsApp, and Meta Ads, only to provide the features enabled by the connecting user and in accordance with applicable Meta terms and developer policies. Users can remove ORBIT's access in ORBIT's Connections section or in the relevant Meta account settings.

11. Google API Services and Limited Use Disclosure

ORBIT's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google API information is used only to provide or improve user-facing ORBIT features requested by the user, such as displaying advertising account and analytics properties, showing campaign and website performance, and creating or managing campaigns at the user's instruction.

ORBIT does not sell Google user data, use Google user data for personalised advertising, transfer Google user data to data brokers, or use Google API data to train general-purpose AI models. Users may revoke ORBIT's Google access through ORBIT Connections or at https://myaccount.google.com/permissions.

12. Cookies, Local Storage, and Similar Technologies

The ORBIT web application uses only technologies required to operate and secure the Service. These may include session tokens stored in browser local storage, security and authentication information, and user preferences required for Service functionality.

The ORBIT website (orbitdm.com) uses Google Analytics 4, provided by Google LLC, to measure visits and how the website is used (for example pages viewed, approximate location derived from IP address, device and browser type, and actions such as opening the demo form). Analytics cookies are set only if you choose “Accept all” in the cookie banner. If you choose “Essential only” or make no choice, no analytics cookies are stored; Google may still receive limited cookieless signals that it uses to estimate overall traffic. Advertising and ad-personalisation signals are always disabled, and ORBIT does not use advertising cookies. You can change your choice at any time with the “Cookie preferences” link in the website footer, and you can opt out of Google Analytics on all websites with Google's opt-out browser add-on.

13. Marketing Communications

We may send marketing or educational communications only where permitted by law. You may opt out using the unsubscribe link in a marketing email or by contacting info@techfeet.ai.

14. Aggregated and De-identified Information

We may create aggregated or de-identified information that is not reasonably capable of identifying an individual and use this information to monitor Service performance and improve features.

15. International Data Transfers

ORBIT and its service providers may process information in countries other than the country where the individual is located, including the United Arab Emirates and the United States. When a user actively runs an AI feature, the relevant text is routed through OpenRouter to OpenAI for processing in the United States and may run on Microsoft Azure infrastructure. Current provider and location information is maintained on the ORBIT Subprocessor List.

16. Data Retention

Data category	Retention
Account and Workspace information	While the account is active and generally up to 30 days after a verified deletion request
Customer Content	Until deleted by the Customer, the Workspace ends, or the applicable post-termination retrieval period expires
Connected Platform access tokens	Until disconnected, revoked, expired, or the account is deleted
Messages, contacts, leads, and opportunities	For as long as the Customer retains them in its Workspace
AI prompts and output stored by ORBIT	For as long as required to provide the feature or until deleted under Workspace retention settings
Technical and security logs	Up to 90 days, unless longer retention is required for a security investigation
Support and sales communications	Up to 24 months after the last communication, unless needed for an active relationship or legal matter
Billing and transaction records	For the period required by applicable accounting, tax, and legal obligations
Backup copies	Database backups run automatically every night. Each backup is deleted after 14 days.

17. Security

We use administrative, organisational, and technical safeguards designed to protect information, including HTTPS encryption during transmission, encryption of Connected Platform tokens at rest, strong one-way password hashing, role-based access permissions, Workspace data separation, protection against repeated failed login attempts, and secure software-development practices.

No online system can guarantee absolute security. Users must protect their credentials and immediately notify ORBIT if they suspect unauthorised access.

18. Automated Decision-Making

ORBIT's AI and analytics features provide assistance, classifications, summaries, and recommendations. ORBIT does not use personal data to make solely automated decisions that produce legal or similarly significant effects on individuals.

19. Your Choices

You can update profile information through Profile settings, manage team permissions through Workspace settings, disconnect a platform through Connections, delete content from applicable ORBIT sections, export available Workspace data, delete your account through Profile settings → Delete account, opt out of optional marketing, or submit a privacy request to info@techfeet.ai.

20. Your Privacy Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to processing, receive data in a portable format, withdraw consent, request information about international transfers, or submit a complaint to an authority. To exercise a right, email info@techfeet.ai from the email address associated with your account.

21. Data Deletion Instructions

21.1 Disconnect Connected Platforms

In ORBIT, open Connections, select the connected account, and choose Disconnect. This removes or invalidates ORBIT's stored access token and stops future collection through that connection.

21.2 Delete Your ORBIT Account

Go to Profile settings → Delete account. Account access will be disabled and the deletion process will begin.

21.3 Request Permanent Erasure

Email info@techfeet.ai from the email address associated with your account using the subject “Data Deletion Request.” Following verification, we will delete or anonymise eligible information within 30 days, subject to legal obligations and security requirements.

21.4 If You Are Not an ORBIT User

If you messaged or interacted with a business that uses ORBIT, contact that business first because it controls the relevant customer data.

21.5 Published Content

Deleting an ORBIT account or disconnecting a platform does not automatically remove content already published or retained on a Connected Platform.

22. Children's Privacy

ORBIT is a business service and is not intended for anyone under 18 years of age. We do not knowingly collect personal data directly from children. If you believe that a child has provided personal data to ORBIT without appropriate authorisation, contact us and we will take reasonable steps to investigate and delete eligible information.

23. Third-Party Websites and Platform Policies

ORBIT may contain links to or integrate with third-party services. Their privacy policies and terms apply when you use them. ORBIT is not responsible for the privacy practices of independent third-party services.

24. Changes to This Privacy Policy

We may update this Policy to reflect changes in ORBIT features, providers, security requirements, or applicable law. We will publish the updated version with a revised “Last updated” date. For material changes, we will provide reasonable notice through email, the Service, or the website.

25. Contact Us

TECHFEET FZE – ORBIT Privacy Team
Sports City, United Arab Emirates
Privacy requests: info@techfeet.ai
Service email: orbit@techfeet.ai
Website: https://orbitdm.com
Application: https://app.orbitdm.com
Subprocessors: https://orbitdm.com/subprocessors

If you believe your privacy rights have not been respected, you may have the right to submit a complaint to the data-protection authority or other competent regulator in your country.