Privacy Policy — Orbi

Last updated: October 2026

Introduction

Orbi is an AI-powered social media co-pilot for small and medium businesses. This policy describes how we collect, use, and protect your data.

Data Collection

When you create an Orbi account and connect your Facebook Page, Instagram Business account, WhatsApp Business number and Ad Account to Orbi, we collect:

• Your email address (to sign in) and the business profile you fill in
• Access tokens for the connected accounts, to receive and send messages, publish content and manage ads
• Messages sent by customers to your Page, Instagram account and WhatsApp number. On Messenger and Instagram, Meta identifies the person who wrote only by an ID: Orbi asks Meta for that person's name and profile picture, and stores the name and the link to the picture that Meta provides (not the image itself; Meta makes that link expire after a few days), only to show you the conversation and who wrote it: in your Orbi inbox, funnel and notifications, and (the name only) in the daily summary that our AI provider writes for you. On WhatsApp, Meta delivers the customer's phone number and profile name with every message. Plus any contact details they write in the conversation or submit in a lead form (leads)
• Post engagement metrics (likes, comments, reach)
• Ad campaign performance data (if Ad Account is connected)
• Aggregated statistics of the connected Page, Instagram account and Ad Account (how each post performed, when your followers are online and their age, gender, city and country, and your ad results by segment), with no one's name or messages, to learn how your business is best shown. Kept for up to 13 months, and deleted immediately when you disconnect the account they came from or delete your Orbi account. The exposure profile Orbi builds from them, and your decisions about it, are kept while your Orbi account exists
• The language your customers write in on Messenger and Instagram: the AI infers it from the conversation, and Orbi counts, per month, how many new conversations came in each language (and whether they came from an ad). The count keeps neither the messages nor who wrote them
• The products and photos you add, and the images and videos Orbi generates for you, stored as files

Data Usage

We use your data only to:

• Reply automatically to customer messages on Facebook, Instagram and WhatsApp, and pass the leads on to you
• Generate texts, images and videos from your business profile, products and photos
• Publish and schedule posts, Stories and Reels on the Facebook Page and Instagram account you connect
• Hide comments that our moderation flags on your posts
• Create campaigns in your connected Ad Account, adjust their budgets and pause them, always within the limits you set (Autopilot)
• Use the classification of your business's conversations (hot, visit booked, conversation taken over by you, sale) to decide which of your business's ads to spend on: only for your business, never for other businesses
• Show analytics, insights and recommendations in your dashboard
• Learn, only for your business, when and how your posts work best, from the aggregated statistics of your own connected accounts: never shared, and never used for other businesses or for sector averages
• Count, per month, the languages your customers write in, so that you can see in which languages to reply and publish

Your customers' data (their messages and what is derived from them, such as the language counts) is processed by Orbi on behalf of your business and only for it: we never use it to serve other businesses and never combine it across businesses.

Data Retention

Messages and responses are retained while your Orbi account is active. The name of each person who wrote to your business and the link to their profile picture are kept with the conversation while your Orbi account exists, and are deleted with it when you delete your Orbi account. The monthly language counts are kept for up to 13 months after the end of the month they refer to, and are deleted when you disconnect, in Orbi, the Page or Instagram account they came from, or when you delete your Orbi account. You can delete your data at any time in the app: in the menu, open Business and click Account (Negócio → Conta; on a phone, a tablet or a narrow window, Business is inside More) → Danger zone (Zona de perigo), at the bottom of the page → Delete account (Eliminar conta). If you have not finished the initial setup, the menu is not shown yet: the same Delete account (Eliminar conta) button is at the bottom of the initial setup screen. You can also contact us. The data deletion page explains what is deleted immediately and what remains for a limited time.

Data Sharing

We share data only with the service providers that run Orbi:

• Anthropic (Claude) — AI that writes replies, posts and analyses
• Google Gemini — AI image generation and narration
• BytePlus ModelArk — AI image and video generation (servers outside the EU)
• Supabase — database and file storage (EU)
• Railway — application server
• Vercel — website hosting
• Sentry — error reports
• PostHog (EU) — website and app analytics
• Meta — the platforms you connect (Facebook, Instagram, WhatsApp, Ads)
• Stripe — payments, when billing is active

We do not sell or share your data with advertisers.

Your Rights

You can request access to your data, a copy of your data on request by email, correction or deletion by contacting us at the email below. You can also delete your account yourself in Business → Account (Negócio → Conta) (see the data deletion page).

Contact

Email: rfgpereira92@gmail.com