Privacy Policy

Your privacy is fundamental to our operations.

Atomik, a sole proprietorship, operates the Orbits platform ("Orbits", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This policy is not intended to limit any rights you have under applicable data protection laws, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect information that you provide directly to us, as well as information generated through your use of the Service.

2. How We Use Your Information

We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, and compliance with our legal obligations.

• To provide and maintain the Service, including automating content creation and distribution.
• To improve our AI models and recommendation engines for your specific business context.
• To manage your account and process payments via our third-party provider, Polar.
• To communicate with you about service updates, security alerts, and administrative messages.
• To analyze usage patterns and optimize the user experience.

3. AI-Generated Content Processing

When you use AI features of our Service, we may process your content through third-party AI services:

• We do not retain or store AI-generated content beyond what is necessary for service delivery unless you explicitly request otherwise.
• All processing is done with the understanding that AI systems may produce inaccurate or biased outputs.
• You acknowledge and agree that you are solely responsible for verifying all AI-generated content before publishing.

4. Data Sharing & Sub-Processors

We do not sell your personal data. We only share information with third parties (Sub-Processors) necessary to provide the Service:

• Cloud Infrastructure: Supabase and AWS (PostgreSQL database, storage, and authentication services).
• AI Computation: OpenAI, Anthropic, and Google Cloud (used for real-time content synthesis and DNA analysis).
• Payment Processing: Polar (handles all subscription billing and financial transactions).
• Analytics: PostHog or similar tools (used for monitoring system performance and user journeys).
• Network Nodes: Third-party social platforms (X, Facebook, Instagram, LinkedIn) receive data only when you initiate a distribution event.

5. Data Retention

We retain your personal data for as long as your account is active, and for up to 90 days after account deletion to allow for account recovery and to comply with legal, tax, and accounting obligations. Social media access tokens are deleted immediately when you disconnect an account. When data is no longer needed, we securely delete or anonymize it.

6. Meta Platform Data

When you connect a Facebook Page or Instagram account, we access data through the Meta Graph API (including Page/Instagram identifiers, access tokens, and content you authorize us to post, read, or reply to) strictly to provide the features you enable, such as scheduled publishing and comment/DM automation.

• We use Meta Platform Data only to operate the features you activate and do not use it for advertising or sell it to third parties.
• Messaging permissions (e.g., pages_messaging, instagram_manage_messages) are used solely to send automated replies you configure, in accordance with Meta's Platform Terms and Developer Policies.
• You can revoke our access at any time from your Facebook or Instagram account settings, or by disconnecting the account inside Orbits, which deletes the associated access token immediately.
• Data Deletion: To request deletion of all data we hold about you that was obtained via Meta Platforms, email support@the-orbits.com with the subject "Meta Data Deletion Request" and the email address or Page/Instagram handle associated with your account. We will confirm deletion within 30 days.

7. Cookies & Local Storage

Our Service utilizes cookies and local storage to maintain session integrity and system state:

• Essential Cookies: Required for secure login and account persistence.
• Functional Storage: Used to store your active project context and draft states.
• Analytical Storage: Anonymous data points used to optimize system throughput and error detection.

You can control cookie settings through your browser, though disabling them may degrade the automated features of the Service.

8. Your Privacy Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. California residents have the right to know, delete, correct, and opt out of the sale/sharing of personal information (we do not sell personal information) under the CCPA. EEA/UK residents have equivalent rights under the GDPR and may lodge a complaint with their local supervisory authority. To exercise any of these rights, contact us at the email below; we will respond within 30 days.

9. Data Security

We use industry-standard safeguards, including encryption of access tokens at rest, TLS in transit, and access controls, to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

10. Children's Privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. International Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a revised "Last Updated" date, and where changes are material, we will provide additional notice (e.g., by email).

13. Contact Us

If you have questions or comments about this policy, you may email us at:

support@the-orbits.com