Privacy Policy
How Socialorbix collects, uses, and protects your information when you use Social Orbix.
This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use Social Orbix and tells you about your privacy rights and how the law protects you.
Socialorbix Technologies ("Socialorbix," "the Company," "we," "us," or "our") operates the Social Orbix platform available at https://socialorbix.com and related applications, APIs, and services (collectively, the "Service").
We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
Contact us:
- Email: legal@socialorbix.com
- Website: https://socialorbix.com
1. Interpretation and Definitions
1.1 Interpretation
Words with initial capital letters have meanings defined below. These definitions apply whether the terms appear in singular or plural.
1.2 Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for you to access the Service or parts of the Service.
- Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
- Company refers to Socialorbix Technologies.
- Cookies are small files placed on your computer, mobile device, or other device by a website, containing details of your browsing history and other uses as described in this policy.
- Country refers to: India.
- Customer means a person or organization that registers for and uses Social Orbix to manage Instagram Business accounts and automations.
- Device means any device that can access the Service, such as a computer, cellphone, or digital tablet.
- End User means a person who interacts with a Customer on Instagram (for example, by commenting, replying to a story, or sending a direct message) and whose data may be processed by the Service on the Customer's behalf.
- Personal Data means any information that relates to an identified or identifiable individual.
- Service refers to the Social Orbix website, applications, APIs, dashboards, and related offerings accessible from https://socialorbix.com.
- Service Provider means any natural or legal person who processes data on behalf of the Company to facilitate, provide, improve, or analyze the Service.
- Third-Party Social Media Service refers to a social network or platform through which a user may authorize access to use the Service, including Meta platforms (Facebook, Instagram, and Threads where applicable).
- Usage Data refers to data collected automatically through use of the Service or from the Service infrastructure itself (for example, IP address, browser type, and diagnostic logs).
- You means the individual or legal entity accessing or using the Service.
2. Who This Policy Applies To
This policy applies to:
- Customers who register for and use Social Orbix (creators, businesses, agencies, and their team members).
- End Users who interact with our Customers on Instagram and whose data may be processed when a Customer's automations run.
Our Customers are responsible for their own use of the Service and for complying with applicable laws when messaging or engaging with their audiences. This policy describes how Socialorbix handles data on behalf of our Customers and in operation of the Service.
4. Types of Data We Collect
4.1 Personal Data you provide when you register
While using the Service, we may ask you to provide personally identifiable information that can be used to contact or identify you, including:
- First and last name
- Email address
- Phone number and country
- Date of birth
- Password (stored in hashed form; we do not store plain-text passwords)
- Profile picture, if you upload one
- Workspace and account preferences
- Records of acceptance of our Terms of Service and this Privacy Policy
We may send one-time passwords (OTP) or other verification messages to your email address to verify your account.
4.2 Instagram and Meta platform data
When you connect an Instagram Business account, you authorize Social Orbix through Meta's OAuth process. Depending on the permissions you grant, we may access and process:
instagram_business_basic
- Basic profile information for the connected Instagram Business account (such as account ID, username, and related account metadata).
- Media and content metadata needed to configure automations (for example, posts, reels, or stories you select in the dashboard).
instagram_business_manage_comments
- Comments on your posts, reels, live streams, and related public engagement data.
- Information needed to read comments and, where configured by you, send automated or manual replies.
instagram_business_manage_messages
- Direct messages sent to and from your connected Instagram Business account.
- Story replies and other messaging events delivered through Meta webhooks.
- Message content and metadata required to send automated or manual responses on your behalf.
We also store:
- Encrypted access tokens issued by Meta to maintain your connection.
- Connection status, token expiry, and account linkage to your workspace.
We do not ask for your Instagram password. Authorization is handled entirely through Meta.
4.3 Data about End Users (your Instagram audience)
When your automations run, we may process data about people who interact with your Instagram account, including:
- Instagram user IDs and usernames, where provided by Meta
- Comment text, story reply text, and direct message content
- Timestamps and event types (for example, comment received, DM received, DM sent)
- Media IDs associated with posts, reels, stories, or live sessions
- Delivery and processing status for automated actions
This data is processed on your behalf to operate the automations you configure.
4.4 Automation and activity data
We store information related to your use of the Service, including:
- Automation rules (trigger types, keywords, messages, target media, status)
- Job queue records and processing history
- Raw webhook payloads and normalized event records
- Activity logs (comments received, messages sent, failures, retries, and related diagnostics)
4.5 Usage Data
Usage Data is collected automatically when you use the Service.
Usage Data may include information such as your Device's Internet Protocol address (IP address), browser type and version, the pages or API endpoints you visit, the time and date of your visit, time spent on those pages, unique device identifiers, operating system, and other diagnostic data.
When you access the Service through a mobile device, we may collect information such as the type of mobile device, mobile device unique ID, mobile IP address, mobile operating system, mobile browser type, and other diagnostic data.
We may also collect information that your browser sends whenever you visit the Service.
7. How We Use Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service, including monitoring usage and operating automations.
- To manage your Account and workspace, including registration, authentication, and access to Service features.
- To perform our contract with you and deliver the features of the Service.
- To connect and maintain Instagram Business accounts through Meta APIs.
- To process webhook events and execute automations you configure.
- To send direct messages and comment replies on your behalf, as authorized by you.
- To contact you by email or other electronic communication regarding your Account, security updates, support requests, and operational notices.
- To provide you with news, product updates, and information about features or offers similar to those you use, unless you have opted out of such communications.
- To manage your requests, including data access, correction, and deletion requests.
- For business transfers, data analysis, identifying usage trends, improving the Service, and evaluating product effectiveness.
- To detect, prevent, and address fraud, abuse, security issues, and technical problems.
- To comply with legal obligations and enforce our Terms of Service.
We process Instagram and Meta data only to provide the features you enable and as permitted by Meta's Platform Terms and the permissions you grant.
To opt out of marketing emails, use the unsubscribe link in any marketing message or email legal@socialorbix.com.
8. Legal Bases for Processing (where applicable)
Depending on your location, we rely on one or more of the following legal bases:
- Performance of a contract: to provide the Service you signed up for
- Legitimate interests: to secure, improve, and operate the Service, prevent abuse, and support Customers
- Consent: where required, such as when you connect a social account, accept this policy, or receive marketing communications
- Legal obligation: where we must retain or disclose information under applicable law
10. Retention of Your Personal Data
The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.
In general:
- Account information is retained while your Account is active.
- Connected Instagram account data and tokens are retained while the account remains connected.
- Automation, job, webhook, and activity records are retained to operate the Service, provide history in your dashboard, support troubleshooting, and meet compliance needs.
- Usage Data is generally retained for a shorter period, except when used to strengthen security, improve functionality, or when we are legally obligated to retain it longer.
When you disconnect an Instagram account or delete your Social Orbix Account, we delete or anonymize associated data within a reasonable period, except where retention is required to comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, or maintain security logs.
Backup copies may persist for a limited time before being overwritten.
11. Transfer of Your Personal Data
Your information, including Personal Data, may be processed and stored in countries other than your own, including where our servers or Service Providers are located. This means your information may be transferred to and maintained on computers outside your state, province, country, or other governmental jurisdiction where data protection laws may differ.
Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer, where permitted by law.
The Company will take steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
12. Delete Your Personal Data
You have the right to delete or request that we assist in deleting the Personal Data that we have collected about you.
Our Service may give you the ability to delete certain information from within the Service, including:
- Updating or correcting profile information in Account Settings
- Disconnecting Instagram Business accounts from your workspace
- Deleting your Account (where available in settings)
You may also contact us at legal@socialorbix.com to request access to, correction of, or deletion of any Personal Data you have provided.
For full step-by-step instructions, see our Data Deletion page: https://socialorbix.com/data-deletion
Please note that we may need to retain certain information when we have a legal obligation or lawful basis to do so.
If you are an End User who interacted with a Customer's Instagram account through Social Orbix automations, please contact that business or creator directly. If they cannot help, contact us and we will assist where we are able.
13. Disclosure of Your Personal Data
13.1 Business transactions
If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy, where required by law.
13.2 Law enforcement
Under certain circumstances, the Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (for example, a court or government agency).
13.3 Other legal requirements
The Company may disclose your Personal Data in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users or the public, or protect against legal liability.
14. Security of Your Personal Data
The security of your Personal Data is important to us. We implement administrative, technical, and organizational measures designed to protect information, including:
- Encryption of sensitive credentials such as Meta access tokens
- Hashed storage of passwords
- Access controls and authentication for the Service
- Secure transmission (HTTPS) for data in transit
No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee absolute security.
15. Your Privacy Rights
Depending on your location, you may have rights regarding your Personal Data, such as access, correction, deletion, restriction, objection, data portability, and withdrawal of consent.
To exercise these rights, contact us at legal@socialorbix.com. We may need to verify your identity before responding.
16. Instagram and Meta Platform Requirements
Social Orbix's use of information received from Meta APIs complies with the Meta Platform Terms and Developer Policies.
If you connect an Instagram Business account, you acknowledge that:
- You must have the rights and authority to connect that account
- You are responsible for the automations, messages, and replies sent through the Service
- Meta may independently collect and process data according to its own policies
- Meta may revoke access if permissions are misused or if required approvals are not maintained
You can revoke Social Orbix's access at any time through your Instagram or Facebook account settings, or by disconnecting the account in Social Orbix.
17. Children's Privacy
Our Service is not directed at anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and believe your child has provided us with Personal Data, contact us at legal@socialorbix.com. If we become aware that we have collected Personal Data from anyone under 13 without verification of parental consent, we will take steps to remove that information from our servers.
To create and use a Social Orbix Account, you must be at least 18 years old (or the minimum age required in your jurisdiction to enter a binding contract and use business social tools).
18. Links to Other Websites
Our Service may contain links to other websites not operated by us (including Meta platforms). If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
19. Changes to this Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.
If changes are material, we may also let you know via email and/or a prominent notice on the Service prior to the change becoming effective.
You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page, unless otherwise stated.
20. Contact Us
If you have any questions about this Privacy Policy or our data practices, you can contact us:
- By email: legal@socialorbix.com
- By visiting: https://socialorbix.com
Social Orbix Technologies LLP
- India