Orbicast

Privacy Policy

Effective Date: April 30, 2026. Operated by Function 10 Media LLC.

1. Data We Collect

When you use Orbicast, we collect:

  • Account information: Your email address and full name when you register
  • Brand information: Brand names, logos, and voice descriptions you provide
  • OAuth tokens: Access tokens for social media platforms you connect to Orbicast. These are stored encrypted and used solely to publish content on your behalf
  • Post content: Text, media, and scheduling data for posts you create or approve
  • Usage data: Actions you take within the platform, approval decisions, and publish events, for audit and analytics purposes

2. How We Use Your Data

  • To operate the Orbicast service and publish content to your connected platforms
  • To maintain an audit log of all actions for your review and liability protection
  • To provide analytics about your publishing activity
  • To communicate with you about your account and the service
  • We do not sell your data to third parties. We do not use your content to train AI models.

3. Meta Platform Data (Facebook and Instagram)

When you connect a Facebook Page or Instagram account to Orbicast, we receive and store the following data from Meta Platforms, Inc.:

  • Page Access Tokens: Long-lived tokens that authorize Orbicast to publish posts to your Facebook Pages on your behalf
  • Facebook Page IDs: The unique identifiers of the Facebook Pages you connect
  • Instagram User IDs: The unique identifiers of the Instagram professional accounts you connect
  • Post metadata: Confirmation data returned by Meta after a post is published, including the platform-assigned post ID

To enable these connections, Orbicast requests the following Meta permissions: pages_manage_posts (to publish posts to your Pages), pages_read_engagement (to confirm post delivery), instagram_basic (to verify your Instagram account), and ig_content_publish (to publish content to Instagram on your behalf).

Meta data is used solely to operate the Orbicast publishing service on your behalf. Meta data is never used for advertising targeting, profiling, or any purpose beyond publishing the content you authorize.

When you disconnect a Meta platform from Orbicast, your Page Access Tokens and Instagram credentials are immediately revoked via the Meta API and permanently purged from our systems within 24 hours. Disconnecting does not affect posts already published.

4. TikTok Platform Data

When you connect a TikTok creator account to Orbicast, we receive and store the following data from TikTok Pte. Ltd.:

  • TikTok Access Tokens: OAuth tokens that authorize Orbicast to publish video content to your TikTok account on your behalf
  • Creator Account Identifiers: The unique identifiers associated with your TikTok creator account
  • Video IDs: The platform-assigned identifiers returned by TikTok after a video is successfully posted

TikTok access tokens are stored encrypted at rest in our database (Supabase), protected by row-level security policies, and accessible only to the authenticated user and service processes operating on their behalf.

When you use Orbicast to post to TikTok, you explicitly authorize Orbicast to submit video content to TikTok on your behalf using the TikTok Content Posting API. Orbicast acts only on content and actions you initiate or schedule within the platform.

TikTok data is used solely to operate the Orbicast publishing service. TikTok data is never used for advertising targeting, profiling, or any purpose beyond publishing content you authorize.

When you disconnect TikTok from Orbicast, your access tokens are immediately revoked and permanently purged from our systems within 24 hours. Disconnecting does not affect videos already published.

Your data may be processed and stored on servers located in the United States. By connecting your TikTok account, you acknowledge that your data may be transferred to and processed in the United States in accordance with this Privacy Policy and applicable data protection laws.

5. Third-Party Data Sharing

Your post content and access tokens are shared only with the social media platforms you explicitly connect to your Orbicast account (for example, Meta for Facebook and Instagram publishing). We do not share your data with any other third parties except as required by law or to operate essential infrastructure (for example, our database provider Supabase, operating under strict data processing agreements).

6. Data Retention

We retain your data for the lifetime of your account. Upon account deletion, your data is permanently removed within 30 days, except where we are required by law to retain it longer. Audit log entries may be retained for up to 7 years for compliance purposes.

7. Your Rights

  • Access: You can request a copy of all data we hold about you
  • Deletion: You can request deletion of your account and associated data
  • Export: You can export your post history and audit log from within your account settings
  • Correction: You can update your account information at any time from your settings page

To exercise any of these rights, contact us at privacy@function10media.com.

8. Cookie Policy

Orbicast uses session cookies strictly necessary for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You cannot opt out of session cookies as they are required for the service to function.

9. Contact

Privacy questions or requests: contact privacy@function10media.com.