Privacy Policy

Last updated: August 2026

1. Who We Are

Orbit Socials (ABN 68 101 267 372) is an influencer marketing platform that connects content creators with brands and companies to facilitate paid collaborations ("orbits"). The platform is operated at www.orbitsocials.com.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, and what rights you have. By using the Platform you agree to this policy.

2. Information We Collect

We collect the following categories of personal information depending on how you use the Platform:

  • Account data: first name, last name, email address, and password (stored as a secure hash by Firebase Authentication). Company users also provide a company name.
  • Identity and age data: date of birth (required for creators to verify you are 18 or older) and phone number, stored in a private, access-controlled subcollection.
  • Profile data: country, profile description, availability, experience, skills, content niches, preferred platforms, follower count range, gender, post frequency, audience demographics (age groups, geographic focus, interests), and content formats.
  • Social media handles: usernames or URLs you manually enter for platforms such as YouTube, Instagram, TikTok, Facebook, Twitter/X, Twitch, Pinterest, Snapchat, and podcasts. We do not connect to or access your social media accounts directly.
  • Profile and post images: profile photos, banner images, and post images you upload to the Platform, stored in Firebase Storage.
  • Orbit and collaboration data: campaigns (orbits) you create or apply to, including titles, descriptions, requirements, payment amounts, content deliverables, submission records, and status history.
  • Messages: direct messages you send or receive through the Platform inbox.
  • Reviews: star ratings and written reviews you submit about other users following a completed orbit.
  • Payment data: companies provide payment card or bank account details, which are handled directly and securely by Stripe. We do not store full card numbers. Creator payout account details (Stripe Connect) are managed by Stripe. We store only the Stripe-issued identifiers needed to process transactions.
  • Referral codes: referral codes used during sign-up or applied to collaborations.
  • Consents and agreements: record of when you agreed to our Terms of Service, and whether you opted in to marketing by email or phone.
  • Usage data: pages visited, features used, and timestamps (such as last active time and account creation date), collected automatically through Firebase.
  • Support communications: messages you send to us by email or through the contact form.

We do not knowingly collect personal information from anyone under 18. Creators are required to confirm they are 18 or older during registration.

3. How We Use Your Information

We use personal information for the following purposes:

  • Providing and operating the Platform: creating and authenticating your account, displaying profiles to other users, matching brands and creators, facilitating orbit applications and collaborations, processing payments, and providing customer support.
  • Age verification: confirming that creator accounts belong to users aged 18 or older.
  • Payments and billing: processing company subscription and orbit payments through Stripe, and facilitating creator payouts through Stripe Connect.
  • Safety and integrity: detecting fraud, abuse, fake accounts, and violations of our Terms of Service; investigating disputes; and complying with legal obligations.
  • Improving the Platform: understanding how the Platform is used, fixing bugs, and developing new features.
  • Marketing: sending product updates, newsletters, or promotional offers where you have consented to receive them. You can withdraw consent at any time by contacting us, without losing access to the Platform.
  • Legal compliance: meeting our obligations under applicable law, responding to lawful requests from authorities, and enforcing our agreements.

4. Who We Share It With

We share personal information only where necessary:

  • Other Platform users: your profile information and collaboration data is visible to other logged-in users as needed to facilitate orbits. If you switch on the Public Profile setting (off by default), your profile, posts and reviews are also visible to anyone, including visitors who are not logged in. Your email, contact details and account settings are never shown publicly. Messages are visible only to the sender and recipient.
  • Firebase (Google): our infrastructure provider. Authentication, database, file storage, hosting, and Cloud Functions are provided by Google Firebase, with primary data storage in the Australia Southeast 1 (Sydney) region. Google may process certain data in other regions as part of operating global infrastructure. See Firebase Privacy.
  • Stripe: payment processing for company billing and creator payouts via Stripe Connect. Stripe is based in the United States and processes payment data under its own privacy policy. See Stripe Privacy Policy.
  • Google reCAPTCHA Enterprise: used for bot and fraud prevention (Firebase App Check). See Google Privacy Policy.
  • Legal authorities: where required by law, regulation, or a valid legal request, or where necessary to protect the rights and safety of our users or the Platform.
  • Business successors: in the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity. We will notify users if this occurs.

We do not sell personal information. We do not share it for cross-context behavioural advertising.

5. International Data Transfers

Orbit Socials is a global platform. If you are located outside Australia, your personal information will be transferred to and processed in Australia and potentially in other countries where our service providers (including Google and Stripe) operate, including the United States.

If you are located in the European Economic Area or United Kingdom, we rely on appropriate safeguards for international transfers, including standard contractual clauses, where applicable.

By using the Platform, you acknowledge that your information may be transferred to and processed in countries with different data protection laws than your own.

6. Cookies and Similar Technologies

We use cookies and similar browser technologies (such as localStorage and IndexedDB) for the following purposes:

  • Essential functionality: keeping you logged in, maintaining your session, and remembering your preferences (such as your selected theme). These cannot be disabled without breaking core functionality.
  • Security: Google reCAPTCHA Enterprise tokens used by Firebase App Check to protect the Platform against automated abuse.

We do not currently use advertising or tracking cookies. If this changes, we will update this policy and our cookie banner accordingly.

You can control cookie and storage settings through your browser, but disabling essential storage will prevent the Platform from functioning correctly.

7. How Long We Keep It

We retain personal information for as long as your account is active and for a reasonable period afterwards in case you return, and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you request deletion of your account, we will delete or anonymise your personal information, except where we are required to retain it by law (for example, financial records related to payments).

Message history, orbit records, and reviews may be retained in anonymised form after account deletion to preserve the integrity of the Platform's history.

8. Security

We take reasonable technical and organisational measures to protect your personal information, including:

  • Encryption in transit (HTTPS/TLS) for all data between your browser and our servers.
  • Firebase Security Rules restricting read and write access to your own data.
  • Sensitive fields (date of birth, phone number) stored in a private, access-controlled subcollection inaccessible to other users.
  • Payment data handled entirely by Stripe and never stored on our servers.
  • Firebase App Check (reCAPTCHA Enterprise) protecting our backend against automated abuse.

No system is completely secure. If we become aware of a data breach that affects your personal information, we will notify you and relevant authorities as required by law.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

  • Access: request a copy of the personal information we hold about you.
  • Correction: request correction of inaccurate or incomplete information. You can update most profile information directly through your account settings.
  • Deletion: request deletion of your account and personal information. You can initiate this through your account settings or by contacting us.
  • Restriction or objection: object to or request restriction of certain types of processing, including direct marketing.
  • Portability: request your personal information in a portable format (where technically feasible).
  • Withdraw consent: withdraw marketing consent at any time without affecting your access to the Platform.
  • Lodge a complaint: if you are in Australia, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the UK, you may contact the Information Commissioner's Office at ico.org.uk.

To exercise any of these rights, contact us at harrison.orbit@gmail.com. We may need to verify your identity before acting on a request.

10. Children

The Platform is intended solely for users aged 18 and over. By creating an account, you confirm that you are at least 18 years old. We do not knowingly collect personal information from anyone under 18.

If we become aware that a user is under 18, we will promptly suspend and delete their account and remove any associated personal information. If you are a parent or guardian and believe your child has created an account, please contact us immediately at harrison.orbit@gmail.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "last updated" date at the top. For material changes, we will notify you by email or in-app notice where possible.

Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, requests, or complaints, please contact us at:

Orbit Socials
ABN: 68 101 267 372
Email: harrison.orbit@gmail.com
Website: www.orbitsocials.com