Privacy policy

Orbit is a content publishing and scheduling tool operated by DDL Ventures that helps you create and publish your own original content to your own connected social accounts, including TikTok. This policy explains what information we handle, how we use it, and your choices.

When you connect your TikTok account, we receive access through TikTok Login to your basic account profile information such as your nickname and account identifiers, and your current posting settings such as available privacy options and whether comment, duet, and stitch are enabled. When you create a post, we handle the media and captions you choose to publish. We handle scheduling details for posts you queue.

We use this information solely to let you review, schedule, and publish your own content to your own TikTok account, to display the correct posting options for your account, to show you the status of your posts, and to operate features you have asked us to perform such as scheduled publishing. We do not use your TikTok information for advertising, profiling, or any purpose beyond delivering the publishing features you request.

If you connect a YouTube channel, Orbit uses Google APIs (including the YouTube Data API) to publish on your behalf. This section explains exactly what we access and what we do with it.

• What we access. Your channel identity (channel name, ID, and avatar) so you can see which channel is connected; permission to upload videos to your channel; and statistics for the videos Orbit uploads (views, likes, and comments) so we can show you analytics.
• What we do with it. We use this data solely to provide Orbit's features to you: uploading the videos you create and schedule to your own channel, showing which channel is connected, and displaying how your posts perform. We do not use Google user data for advertising, and we do not use it to train AI models.
• What we never do. We never sell your Google or YouTube data, and we never share it with third parties. It is only processed by the infrastructure providers that host Orbit, under confidentiality obligations, to run the service.
• How to revoke access. You can disconnect your YouTube channel inside Orbit at any time, or revoke Orbit’s access from your Google account at myaccount.google.com/permissions. Once revoked, Orbit can no longer access your channel, and we delete the stored authorization tokens.

Orbit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If you connect an Instagram or Facebook account, Orbit uses Meta's official APIs (the Instagram Graph API and Facebook Login) to publish on your behalf. This section explains exactly what we access and what we do with it.

• What we access. Your basic account and profile details (account name, ID, and avatar) so you can see which account is connected; permission to publish the content you create to your own connected account; and public metrics for the posts Orbit publishes (such as views, likes, and comments) so we can show you analytics.
• What we do with it. We use this data solely to deliver Orbit's publishing features to you: posting the content you create and schedule to your own account, showing which account is connected, and displaying how your posts perform. We do not use Meta data for advertising, profiling, or to train AI models.
• What we never do. We never sell your Instagram or Facebook data, and we never share it with third parties beyond the infrastructure providers that host Orbit, which are bound by confidentiality obligations.
• How to revoke access. You can disconnect your Instagram or Facebook account inside Orbit at any time, or remove Orbit from your Facebook Business Integrations settings. Once revoked, Orbit can no longer access your account, and we delete the stored authorization tokens.

Our handling of Instagram and Facebook data complies with the Meta Platform Terms and Developer Policies.

Content you create in Orbit is published to your own connected account only, at your direction, after you review and consent to each post or schedule it in advance. We do not repost, resell, or share your content with third parties.

We store connection tokens and post data securely using industry standard technical and administrative safeguards. Media you schedule is stored on infrastructure we control only for as long as needed to deliver your scheduled posts. Access is restricted to the operation of the service.

We do not sell your personal information. We share information with TikTok only as necessary to publish your content through the official TikTok API, in accordance with TikTok's Developer Terms of Service. We use trusted infrastructure providers to operate the service, bound by confidentiality obligations.

You can disconnect your TikTok account at any time, which revokes Orbit’s access. You can request deletion of your account and associated data by contacting us at daniel@ddl-ventures.com, and we will delete your stored data except where we are required to retain it by law.

You control which account is connected, what content is created, when it is published, and its privacy level. You choose whether any post is published, and you may cancel scheduled posts before they publish.

Depending on where you live, you have rights over your personal information, and Orbit honors these rights for everyone regardless of location.

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to fix information that is inaccurate or incomplete.
• Deletion: ask us to delete your account and associated data, subject to legal retention requirements.
• Portability: request your information in a portable, machine-readable format.
• Objection and restriction: object to or ask us to limit certain processing of your information.
• Withdraw consent: disconnect a connected account at any time, which revokes Orbit's access going forward.

If you are in the European Economic Area or the United Kingdom, the GDPR gives you these rights; we process your information to deliver the service you request and on the basis of your consent, which you can withdraw at any time. If you are a California resident, the CCPA gives you the right to know what personal information we collect, to request its deletion, and to not be discriminated against for exercising your rights. We do not sell your personal information. To make a request, contact us at daniel@ddl-ventures.com; we will respond as required by applicable law and will never charge you for exercising a privacy right.

Our handling of TikTok data complies with the TikTok Developer Terms of Service. Our handling of Google and YouTube data complies with the Google API Services User Data Policy, including its Limited Use requirements, and our handling of Meta data complies with the Meta Platform Terms. Across all platforms, our practices comply with applicable data protection laws, including the GDPR and the CCPA.

For any privacy questions or requests, contact us at daniel@ddl-ventures.com.