Orbin
Start free trial
Privacy

Privacy Policy

This policy explains what data Orbin collects, how we use it, and the choices you have. Orbin is operated by ValidPixel, LLC.

Last updated · October 2, 2026

1. Overview

This Privacy Policy describes how ValidPixel, LLC (“ValidPixel,” “we,” “us”) handles personal information in connection with Orbin (the “Service”). It applies to visitors of our website and users of the Service. By using Orbin, you agree to this policy.

2. Information we collect

  • Account information — your name, email address, password (stored hashed), and workspace details.
  • Social connection data — when you connect a social network, we receive access tokens and profile details (such as page or account name, ID, and follower counts) through the platform’s official API. Tokens are encrypted at rest.
  • Content — posts, captions, media, schedules, and analytics you create or import into the Service, including comments on your connected accounts’ posts and the replies Orbin drafts or sends, when you enable comment auto-response.
  • Payment information — handled by our payment processor (Stripe). We do not store full card numbers.
  • Usage and device data — log data, IP address, browser type, and product interactions used to operate and improve the Service.

3. How we use information

  • to provide, maintain, and secure the Service;
  • to publish and schedule content to the networks you connect, on your instruction;
  • to generate AI-assisted content and engagement predictions you request;
  • to draft, and — if you turn on comment auto-response — automatically post, replies to comments on your connected accounts, according to the guidance and approval settings you configure;
  • to process payments and manage subscriptions;
  • to provide support and send service-related communications;
  • to detect, prevent, and address fraud, abuse, and security issues;
  • to comply with legal obligations.

4. Social platform data

We access third-party platform data only with the scopes you authorize, and only to operate features you use — for example, to publish a post to a Facebook Page or to display analytics. If you enable comment auto-response, we also receive new comments on your connected Facebook and Instagram posts through the platform’s webhook, in order to draft and, if you choose, post a reply. You can disconnect a network at any time from your account, which revokes Orbin’s stored access for that connection. Data obtained from platforms is used in accordance with their developer policies.

5. AI processing

When you use AI features, the relevant content (such as a prompt, draft, voice note, or a comment on your post) is sent to our AI provider, Anthropic, to generate a response. We do not sell your content, and we do not use it to train third-party foundation models except as needed to provide the feature you invoked.

If you use Orbin's AI avatar video features, additional processing applies: creating an AI avatar sends a reference photo of the real person it represents to our video-generation provider, HeyGen, to train the avatar, and generating a video sends your script (and, for a "Customer story" video, the testimonial source you provide) to HeyGen to render it. Generated videos are copied to our own storage and, once that copy succeeds, we ask HeyGen to delete its copy — HeyGen may still retain data as described in its own privacy policy.

6. How we share information

We do not sell your personal information. We share it only with:

  • Service providers (subprocessors) that help us run Orbin — including Anthropic (AI text and content generation), HeyGen (AI avatar video generation), Stripe (payments), and our hosting and infrastructure providers — under confidentiality obligations;
  • Connected social networks, when you publish or schedule content to them;
  • Authorities, when required by law or to protect rights, safety, and the integrity of the Service;
  • A successor, in connection with a merger, acquisition, or sale of assets.

7. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or anonymize your data within a reasonable period, except where retention is required by law.

8. Security

We use technical and organizational measures to protect your data, including encryption of social tokens at rest, workspace isolation, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to notify you of incidents where required.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. If you are in the EEA or UK (GDPR) or California (CCPA/CPRA), these rights may apply to you. To exercise them, contact support@orbin.io. We will not discriminate against you for exercising your rights.

10. Cookies

We use essential cookies to keep you signed in, protect your account, and remember preferences — these can't be turned off without breaking the Service. With your consent, we also use analytics and advertising cookies (Google Ads) to understand product usage and measure campaign performance. You can accept, reject, or change these at any time from the cookie banner or the “Cookie preferences” link in the footer, or through your browser settings; disabling essential cookies will affect functionality.

Cookieless site statistics. On our public website we also count page views, clicks on sign-up links and new sign-ups using a first-party counter that sets no cookies. It records only a daily total for each page, the website that referred the visit, and any campaign tags (UTM) in the link. It does not store your IP address, user agent, or any visitor identifier, and it does not count visits from bots or from browsers that send Do Not Track or Global Privacy Control. Your IP address is used only briefly to limit abuse and is not saved with these counts. When you create an account, we save the page and source that brought you to the sign-up form with your account so we can see which pages lead to sign-ups. If you have accepted analytics, we also keep the first page of your visit in your browser's session storage until you close the tab, so that we can attribute your sign-up to it.

11. International transfers

We are based in the United States and may process your information there and in other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

12. Children’s privacy

Orbin is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with an updated “Last updated” date and, where appropriate, communicated through the Service.

14. Data deletion

You can remove the data Orbin holds for any connected social account — including Facebook Pages and Instagram accounts — at any time:

  • In the app — go to Dashboard → Accounts and click Disconnect on the account. This immediately deletes Orbin’s stored access token for that connection.
  • Delete your account — from Settings, deleting your Orbin account removes your connected accounts and associated data, as described in “Data retention” above.
  • By request — email support@orbin.io with the subject “Data deletion” and the account concerned. We will delete the associated data within 30 days and confirm by email.

This page (orbin.io/privacy#data-deletion) serves as Orbin’s data deletion instructions for the Meta Platform.

15. Contact us

For privacy questions or data requests, email support@orbin.io.